Hello folks,
I want to get the whole event to a shell script, I am trying to use exec output plugin.
Please note, I don't have "message" variable.
This is the output in JSON.
{"taskid":"vMUKrDoBSX-12349","@version":"1","txn"..}
Here is my output filter I want to use,
output {
exec {
command => "myscript.sh ${???}"
codec => "json_lines"
}
}
My question is what should I pass in ??? , since I don't have a message. I want to pass the root of event.