I tried what you told me but I still get the error, I don't know why?
filter {
if [host] == "10.10.66.12" {
mutate { add_field => {"state" => 0}
convert => {"state" => "integer"}
}
mutate {
convert => {
"MemoryTotal" => "integer"
"MemoryUsage" => "integer"
}
convert => { "CPUTotal" => "integer" }
convert => { "MemoriaUsadaTotal" => "integer" }
rename => ["host","IP"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.1.2.1.5.0", "Out"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.1.2.1.3.0", "In"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.1.2.12.6.0", "NewConnects"]
rename => ["iso.org.dod.internet.mgmt.mib-2.system.sysName.0", "Sysname"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.1.2.1.45.0", "MemoryUsage"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.1.2.1.44.0", "MemoryFree"]
rename => ["iso.org.dod.internet.private.enterprises.2021.4.5.0", "MemoryTotal"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.7.5.2.1.27.1.48.1", "CPU1"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.7.5.2.1.27.1.48.2", "CPU2"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.7.5.2.1.27.1.48.3", "CPU3"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.7.5.2.1.27.1.48.4", "CPU4"]
rename => ["iso.org.dod.internet.private.enterprises.2021.9.1.9.1", "Disk1Usage"]
rename => ["iso.org.dod.internet.private.enterprises.2021.9.1.9.2", "Disk2Usage"]
rename => ["iso.org.dod.internet.private.enterprises.2021.9.1.7.1", "DiskFree"]
rename => ["iso.org.dod.internet.mgmt.mib-2.system.sysLocation.0", "SysLocation"]
rename => ["iso.org.dod.internet.private.enterprises.3375.2.1.3.2.3.2.1.2.1", "ChasisTemp"]
}
ruby {
code => "event.set('CPUTotal', (event.get('CPU1') + event.get('CPU2') + event.get('CPU3') + event.get('CPU4')) / 4)"
}
ruby {
code => "event.set('MemoriaUsadaTotal', event.get('MemoryUsage') / event.get('MemoryTotal'))"
}
}
if [CPUTotal] > "40" {
mutate {
update => {"state" => "1"}
}
}
else if [ChasisTemp] > "45" {
mutate { update => {"state" => "2" }
}
}
else if [MemoriaUsadaTotal] > "40" {
mutate { update => {"state" => "3" }
}
}
else {
mutate { update => {"state" => "0" }
}
}
}