We have a requirement in LogStash filter logic to persist an extracted field to compare for upcoming events. Can you please suggest any options to cache / presisted queue / local variable concepts that we can use to achieve this. Any sample code snippet would save lot of time for us. Thanks!
You might be able to do it using an aggregate filter.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.