Can i do something like if a log contains a specific text ,then use the specific dissect processor statement, else use another dissect statement
{
"pipeline" : {
"processors" : [
{
"if": {
"contains": "xyz" ,
"dissect":
{ "field": "message",
"pattern" : "%{date} %{IP} : %{description}"
}
}
"if": {
"contains": "abc" ,
"dissect":
{ "field": "message",
"pattern" : "%{date} %{IP} : %{description}, %{number}"
}
}
}
]
}