Hi Team, I'm shipping logs from windows servers using filebeat. I have created a field which shows the reponse time in milliseconds. I have created a field "Create_Indexing_response_time_ms" using grok and it works perfectly when I run logstash and the field is getting created in ES However when …

Finally it worked after I added the field again using "and" for the same field if [fields][logtype] == "Seal_Async_Logs" and ([createdetectingcontentrt] < 2000 and [createdetectingcontentrt] < 2000) { mutate { add_field => { "responsetime" => "2secs" } } }

Discuss the Elastic Stack

Less than or equal not working logstash filter and crashing

Elastic Stack Logstash

Badger September 9, 2021, 3:29pm 4

See the answer here.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.