IF with Mutate Filter

Elastic Stack Logstash
1

I have a couple fields that will come in one of two values, r or s. I'd like to convert them to Relaxed or Strict as they come, but there may be instances where the field has no value. Is there a more efficient way than writing two if statements for each field?

Disregard, realized I could just use mutate's gsub function.

2

Or the translate filter :slight_smile:

1 Like
3

Ooooo, I hadn't looked at translate before...that looks neat. I'll have to keep that in my back pocket.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.