Read the Logevent into exec output

Hello folks,

I want to get the whole event to a shell script, I am trying to use exec output plugin.

Please note, I don't have "message" variable.
This is the output in JSON.


Here is my output filter I want to use,

output {
exec {
command => " ${???}"
codec => "json_lines"

My question is what should I pass in ??? , since I don't have a message. I want to pass the root of event.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.