Logstash translate filter

Elastic Stack Logstash
1

hi,

i have a csv file containing malicious domains and category,i want to check whether those domains are comings in my logs and i achieved that using translate field..but i want to extract the particular category also which is not coming for a larger csv file

> sample csv file

xyz.com,malware
hhhh.com,APT
llll.com,C&C

logstash

filter
{
  translate { field => "domainname"
                     destination => "blacklisted"
                     source => "/tmp/malicious.csv"
                    exact => "true"
}}

my output should contain xyz.com and also category malware..when i try the above code for a 100lines of csv file its working good..but when i give 1gb file its not working.please help

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.