Logstash count insta Filter aggregate

Elastic Stack Logstash
1

Hello,
I would to know the best way to have count_event as aggregate for task_id equal to field1.
I can create count as new event but notre like in the following format.

Field1, field2, field3, field4, count_event
 A,B, C, 1,2
A,D, E, 0,2
B, E, T, 1,2
B, R, H, 0,2
S, V, X, 1,1

Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.