Mutate or grok product/price that keep changing everyday

Elastic Stack Logstash
1

Hi, I have a question about logstash for CSV.

My situation is, I have multiple CSV files being uploaded into logstash. the log will continue to update for product or price but the domain will remain the same. my question is, how can I filter, mutate or add something to show on kibana what is the product or IP that have been changing for the last 24hours for the metrics lens or any others related lens.

I have tried to add new files like "date_added" and filter it by that field, but it doesn't seem to work. Any idea or suggestion on how can I make it happen?

  mutate {
    add_field => { "Date_Insert" => "%{@timestamp}" }
 }

day 1
domain,product,ip
url.com,ball,192.168.1.1
url2.com,laptop192.168.1.2
url3.com,chair,192.168.1.3

day 2
domain,product,price
url.com,ball,192.168.1.5
url2.com,laptop,192.168.1.6
url3.com,chair,192.168.1.7

day 2
domain,product,price
url.com,laptop,192.168.1.2
url2.com,chair,192.168.1.3
url3.com,ball,removed

p/s: I got 2 different CSV files being uploaded into logstash.

Thank you

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.