Need clarity - logstash 'filter' patterns


(subin) #1

In the docs and various examples, I'm seeing if statements in Input section, like:

if [message] =~ /dovecot: (imap|pop3|managesieve)-login

Apart from [message], what other fields can if take? I don't have much understanding about this. Is any documentation available?

Thanks.


#2

https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#conditionals


(Mark Walkom) #3

Basically you can put a reference to a field, or a value.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.