[Logstash] Aggregate Filter Plugin with Nested Fields

Elastic Stack Logstash
1

Hi, I'm trying to use aggregate filter plugin with nested fields on a logstash config file. But I have a nested field inside other nested field. Is it possible to do in logstash? Maybe with multiple aggregate filters? My input is an oracle bd and I'd like to do something like this:

    aggregate {
    task_id => "%{id_proc}"
    code => "
      map['id_proc'] = event.get('id_proc')
      map['co_uuid_unid'] = event.get('co_uuid_unid')
      map['dt_reg'] = event.get('dt_reg')
  
      map['peopleList'] ||= []
      map['people'] ||= []
      if (event.get('id_pp_person') != nil)
        if !( map['peopleList'].include? event.get('id_pp_person') ) 
          map['peopleList'] << event.get('id_pp_person')
  
          map['people'] << {
            'id_pp_person' => event.get('id_pp_person'), 
            'name_person' => event.get('name_person'),
   	    {    
	      map['docsList'] ||= []
	      map['docs'] ||= []
	      if (event.get('id_pp_doc') != nil)
		if !( map['docsList'].include? event.get('id_pp_doc') ) 
		  map['docsList'] << event.get('id_pp_doc')
		  map['docs'] << {
		    'id_pp_doc' => event.get('id_pp_doc'), 
		    'number_doc' => event.get('number_doc')
		  }
		end
	      end 
             }
          }
        end
      end

      event.cancel()
    "
    push_previous_map_as_event => true
    timeout => 5
  }

Thanks!!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.