Hi @Suhee_Kim
Since you have used codec => json in stdin, by the time you reach filter your message is already converted to json fields. Hence message field is not available.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.