Multiple if conditions in output section-Logstash conf

Elastic Stack Logstash
1

Hi there!

I wanted to use if conditionals, Like I dont want to load the log data with log levels TRACE, DEBUG log levels.
So here is my output section:

output {
if "_grokparsefailure" in [tags] {
stdout { codec => rubydebug }
}
if "log" in [tags] {
if "DEBUG' not in [level]{
elasticsearch { hosts => ["xxx.xxxx.xxx.com"] }

}
if "TRACE' not in [level]{
elasticsearch { hosts => ["xxx.xxxx.xxx.com"] }

}
}

}

Its working fine. But I wanna use only one condition (like if not in debug OR not in level) then load the log data. I am not able to figure out how to use OR ,(||) here?
Any help?

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.