LogStash - Data-enhancement at Insert

Elastic Stack Logstash
1

Hello !

I am currently looking to considerably improve our data-enhancement and ingesting pipeline by trying to give more responsabilities to ELK.

Currently before inserting time of a document, I call few APIs (gRPC but can be migrating to REST pretty easily) to enhance it, add some fields and once the response received I transform the data and insert it.

I know that LogStash is pretty efficient to tansform the data, I would like to know if there is any mechanism inside LogStash to call some APIs to add some fields to a given document at Ingest Time inside LogStash ? If yes, is that a good pattern ?

Best !

2

Yes you can use http filter for that.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.