Hi!!! In my config file i have a part: if [message] =~ /^Deauthorizing client / { mutate { add_tag => “end_timer” } noop { add_field => { "event" => "deauthorize" }} } if [message] =~ /^Logged in/ { mutate { add_tag => “start_timer” } noop{ add_field => {"event" => "logged in"}} } all I…

Load config file into logstash

Smasell (Sergey) July 6, 2015, 5:53am 5

@magnusbaeck
Everything is ok, I have wrong quotes in my add_tag. Thanks for your help.

Topic		Replies	Views
Mutate Add_field Logstash	2	1342	September 30, 2016
Add_tag and add_field not working Logstash	1	1104	January 26, 2017
Input / Filter problems with 6.3.2 Logstash	3	635	August 30, 2018
Grok add field and add tag not working Logstash	2	997	August 11, 2017
Logstash not adding new field tag Logstash	3	323	December 4, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Load config file into logstash

Related topics