Hi,
I am writing a filter plugin that caches some information from events and may use that to populate other events. Something like marking a tcp handshake packets with details of the handshake (whether or not the handshake was initialized).
At the moment I am using an instance variable "@handshakes" to hold some information about each handshake.
My question is this:
Can I use logstash pipeline workers > 1 when doing this? ie. Can pipeline workers share variables like this?
Thanks