here is the output in stdout
"@timestamp" => 2018-08-01T07:41:56.343Z,
"data" => [
"message" => "test\r",
"@version" => "1",
"host" => "host",
"tags" => [
it seems that it doesnt find the value param in the column b but i'm sure it is.
Do you know why ?
The above is saying: "Get the param field's value from the the event and replace the token :p with it in the statement.
But you don't have a field called param in the event at the time it is processed by the jdbc_streaming filter.
You have a message field, but its value has a \r carriage return at the end.
Here is a working example using my test postgres db: Notes
I use the generator input all the time to send test data into a pipeline, in this case its a fixed size delimited string (3 of them) in the lines array setting - each line becomes a Logstash Event.
I used the dissect filter to break up the fixed size delimited string into values for fields in the event.
I converted the amount and loggedin_userid fields to their numeric equivalents.