Logstash or condition in if statement

[magnusbaeck (Magnus Bäck)]

You need this:

if [logid] == "%LINK-3-UPDOWN" or [logid] == "%ETHPORT-5-IF_DOWN_LINK_FAILURE" or [logid] == "%ETH_PORT_CHANNEL-5-PORT_DOWN"