Logstash grok IF condition fields

Elastic Stack Logstash
1

Hi,
Please let me know, following if condition can run for any docker images. I want to filter postgres-1 docker image logs only. What are those values ([docker][container][labels] ) How can I create this type of filter fields. Please explain this if possible.

filter {
if [docker][container][labels] == "postgresql-1" {
grok {
pattern_definitions => { patterns goes here..... }
}
}
}

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.