Multiple filters are beeing ignored, trying to add multiple fields for cloudwatch

Hi,

Logstash version 6.0.0-beta1 and also latest stable has been tested.

i have the following pretty simple config:

input {
  http_poller {
    urls => {
        test1 => "http://localhost:3030/"
      }
    request_timeout => 60
    schedule => { cron => "* * * * * UTC"}
  }
}
filter {
    json {
       source => "message"
    }
    mutate {
      add_field => ["CW_metricname", "nodes"]
      add_field => ["CW_unit", "Count"]
      add_field => ["CW_value", "%{[total][nodes]}"]
    }
    mutate {
      add_field => ["CW_metricname", "incomingMessages"]
      add_field => ["CW_unit", "Count"]
      add_field => ["CW_value", "%{[total][incomingMessages]}"]
    }
    mutate {
      add_field => ["CW_metricname", "technicalErrors"]
      add_field => ["CW_unit", "Count"]
      add_field => ["CW_value", "%{[total][technicalErrors]}"]
    }
}
output {
    cloudwatch {
      access_key_id => ""
      secret_access_key => ""
      region => ""
    }
}

My problem is very simple, one the "nodes" value gets to cloud watch, all other new metrics/fields are just ignored.

I tried many things, but nothing is working anymore and I am not sure if its a bug or am i tackling it wrong.

The debug output does also look correct to me:

    },
       "@timestamp" => 2017-08-22T15:24:00.800Z,
         "CW_value" => [
        [0] "1",
        [1] "0",
        [2] "6"
    ],
          "CW_unit" => [
        [0] "Count",
        [1] "Count",
        [2] "Count"
    ],
         "@version" => "1",
    "CW_metricname" => [
        [0] "nodes",
        [1] "incomingMessages",
        [2] "technicalErrors"
    ]
}

Any help appriciated.

Thanks!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.