Hello,
I have a log file (*.csv) with this specifific structure
datetime;level; statuscode; message
Sometimes missing the "statuscode" and that row has only 3 columns (datetime;level;message).
Can I somehow skip rows with 3 columns?
input {
file {
path => ["/usr/share/logstash/data1/*.csv"]
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
csv {
separator => ";"
columns => ["datetime", "level", "statuscode", "message"]
}
}
output {
elasticsearch {
hosts => ["http://host.docker.internal:9200"]
index => "log"
}
}