Hi,
Please help me with the if condition filter in logstash for same KQL querymentioned below.
message: *.url.* and not *failover*
Below logstash filter is not working
filter{
if ([message] != ‘.\.url\..’ and [message] == ‘.failover.’)
{
grok{}
}
else{
drop{}
}
}