I believe I have read all current filter docs, but still I'd like to get input from more knowledgeable folks: I want to parse with logstash curency counter information, structured like:
The input is a text file, shipped in via filebeat:
My loglines may contain all ISO currency codes.
Depending on the currency there may be varying repetitions.
The output should enable me to generate stacked bar charts over time, either in Kibana or maybe even with Jupyter Notebooks utilizing matplotlib.
I will import my own data and maybe my wive's -- but I will have an identifier field to distinguish.
After reading the docs I am tempted to use a ruby filter.
Is that the best fitting strategy?
(I will be perfectly able to dabble with the code myself, but rather want an educated hint if that is the right direction.)