I'm using jdbc_static filter to enrich data from another log. My problem is that my lookups returns more than one row. When I tried accessing the field with something like "%{[server][0][description]}" it didn't get the wanted value.
I know that it is stated in Logstash documentation that "Ideally the SQL statement should only return one row." But what should be the solution if this kind of problem happens?
Thank you for your guidance.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.