你好,我在filter阶段使用if语句做条件判断的时候出现if语句无效果,也没有报错。版本7.1.1 例句如下。
filter {
if [message] in ["te1","bb","lkj","hetyafaef"]
grok{
match => {"message" => "**********************************"}
}
}
你好,我在filter阶段使用if语句做条件判断的时候出现if语句无效果,也没有报错。版本7.1.1 例句如下。
filter {
if [message] in ["te1","bb","lkj","hetyafaef"]
grok{
match => {"message" => "**********************************"}
}
}
That array membership test is equivalent to
if ([message] == "te1") or ([message] == "bb") or ([message] == "lkj") or ([message] == "hetyafaef")
Is that what you want?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.