Hi, I'm using elasticsearch filter plugin in a pipeline configuration like this:
elasticsearch {
hosts => ["elasticsearch:9200"]
index => ["logstash-indexname"]
query => "item:%{[itemname]}"
The question is: how can I perform a query with an exact macth?
To better detail the question (maybe I've been unclear) I need that query
query => "item:%{[itemname]}"
To be an exact one.
For istance, if itemname is "foo", then I don't want the query to match foo-something in the index logstash-indexname.
Is it a matter of syntax or this is impossible to achieve?
system
(system)
Closed
July 17, 2018, 9:02am
3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.