Logstash output by condition

Hi @tbs575,

Using the conditional operator, similar to this thread is probably the best approach. It sounds like you've have issues with that approach. Can you give a snippet of what you've tried and if you received a particular error?