Read the Logevent into exec output

Hello folks,

I want to get the whole event to a shell script, I am trying to use exec output plugin.

Please note, I don't have "message" variable.
This is the output in JSON.

{"taskid":"vMUKrDoBSX-12349","@version":"1","txn"..}

Here is my output filter I want to use,

output {
exec {
command => "myscript.sh ${???}"
codec => "json_lines"
}
}

My question is what should I pass in ??? , since I don't have a message. I want to pass the root of event.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.