I have configured logstash filter as follows. But following filed "NFC_APP_TYPE" (newly added filed by using a if condition) doesn't appear in Kibana dash board filter{ ......... if [AppCode] == "505050" { mutate {add_field => [ "NFC_APP_TYPE", "SEMA" ]} }else if [AppCode] == "404040" { mutate…

" AppCode": "505050", There's a leading space in the field name.

Logstash if condition issue

magnusbaeck (Magnus Bäck) October 31, 2017, 7:21am 2

Is AppCode numeric or a string? See Logstash filter not working. Probably my fault :D.

1 Like

Topic		Replies	Views
Trouble with filter conditional logic Logstash	6	272	January 21, 2023
Logstash if-condition doesn't match Logstash	1	829	December 6, 2017
If condition, with csv filter not working Logstash	5	2650	October 6, 2017
Filter if condition in Logstash Logstash	8	19412	July 24, 2019
Logstash if condition skipped Logstash	18	645	August 7, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash if condition issue

Related topics