Logstash: is it possible to save documents in memory?

Elastic Stack Logstash
1

Hello Folks,

I am trying to save data in memory that I would be able to retrieve quickly in my filter part. Indeed, when i receive new documents i want to retrieve former documents related in order to compute some new metrics.

Can anyone tell me if it is possible and if yes how could I achieve that ?

Thank you very much.

S

2

Depending on the specifics there's no stock filter for doing this. The ones that come closest are probably the collate, elasticsearch, and translate filters.

1 Like
3

Ok thank you for the information. I am looking at these options.
I recently saw that there is an unofficial plugin 'memcached'. However, I don't know its performances.