Is there a way with the fingerprint filter to hash every field into one hash value? fingerprint { method => "SHA1" source => ["myfield1", "myfield2"] concatenate_sources => true } By default fingerprint uses message as the source, however if message is not present you ha…

Logstash fingerprint hash everything

Exocomp (Exocomp) March 9, 2017, 7:03pm 3

Thanks for confirming, that is what I ended up doing.

E

Topic		Replies	Views
[Solved] Fingerprint does not work as expected II Logstash	7	2428	July 6, 2017
Fingerprint filter and concatenate_sources Logstash	4	1451	July 6, 2017
Logstash fingerprint with concatenate_all_fields validation Logstash	2	838	September 11, 2019
Logstash fingerprint not able to remove duplicate Logstash	8	1646	October 22, 2019
Fingerprint does not work as expected Elasticsearch	3	1103	June 1, 2016

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash fingerprint hash everything

Related topics