Is the below logstash syntax correct and mean the same?
If [id] =="abc" and ([table] =="g" or [table] =="h")
If [id] =="abc" and [table] in ("g", "h")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.