Logstash elasticsearch filter plugin exact match


#1

Hi, I'm using elasticsearch filter plugin in a pipeline configuration like this:

elasticsearch {
	hosts => ["elasticsearch:9200"]
	index => ["logstash-indexname"]
	query => "item:%{[itemname]}"

The question is: how can I perform a query with an exact macth?


#2

To better detail the question (maybe I've been unclear) I need that query

query => "item:%{[itemname]}"

To be an exact one.
For istance, if itemname is "foo", then I don't want the query to match foo-something in the index logstash-indexname.

Is it a matter of syntax or this is impossible to achieve?


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.