I want to reuse some query files. I'm using jdbc statement_filepath for a logstash input that is NOT on a schedule. I have another jdbc input with statement_filepath with a very similar query that IS on a schedule. In fact, the queries are the same, except the scheduled input has a where clause on it.
Is there a way to append a where clause to my statement_filepath? Since the first, not scheduled, query retrieves all data, I didn't want to use a post query filter (unless I had to).
The only thing that comes to mind is creating a new file from a base file and add that new query file to my docker container. That could work, but seems dirty if the ELK world already has it resolved.
I'm using mysql-connector-java-5.1.46 for my driver library if that matters.