I am a newbie in ELK stack. My question is: There is an event containing a context id and coming to logstash. I need to keep track of this context id and put it in all the incoming events. How can it be done?

Badger, Could you take a look at my latest submission under Beats/Filebeat: “How to send two different log file types from the same source directory to logstash” Thank you, Michael Golubov Michael Golubov QT IT - Trading Tools - US ()

Discuss the Elastic Stack

Keep track of Context ID and insert into every incoming record

Elastic Stack Logstash

Badger April 26, 2019, 12:05am 2

Reading through this thread might help you, but it is not entirely clear what you want to do.

Topic		Replies	Views
Stateful contextual tagging Logstash	8	1921	July 6, 2017
Receiving from different inputs on same logstash instance Logstash	2	470	July 11, 2017
Logstash dynamic id Logstash	9	2247	April 3, 2018
Duplicate log events with different _id generated by logstash Logstash	2	399	May 7, 2020
Reingest Winlogbeat Events through Logstash Logstash	1	227	July 24, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Keep track of Context ID and insert into every incoming record

Related topics