Logstash 5.6 how to add_field from redis?

Elastic Stack Logstash
1

input log like this
"""
{"@timestamp":"2017-11-23T16:10:20+08:00","host":"192.168.3.251","userip":"192.168.3.254","size":1973,"responsetime":0.000,"upstreamtime":"-","upstreamhost":"-","http_host":"192.168.3.251","url":"/","xff":"-","r
eferer":"-","agent":"curl/7.19.7 (x86_64-suse-linux-gnu) libcurl/7.19.7 OpenSSL/0.9.8j zlib/1.2.3 libidn/1.10","status":"200"}
"""
i want add_field "usermac":"0F0F0F0F0F0F",
ip-mac mapping in redis,key is ip value is mac,use GET 192.168.3.254 can get usermac
i dont know how to achieve in Logstash

2

So you're basically looking for a translate or jdbc_streaming filter but for Redis. It looks like https://github.com/meulop/logstash-filter-redis would do the job but it's not a standard plugin and I don't know anything about its quality.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.