Regular expression on array/list field

Elastic Stack Logstash
1

Hi,

I was wondering if it is possible to make an expression into an if condition where I could check if a field, which is an array/list, could contain any string matching certain regular expression. For example

tags => ['unparsed_err1', 'unparsed_err2']

then I would like to code:

if 'unparsed_*' in [tags] {
    do something
}
2

This isn't possible out of the box. You'll have to use a ruby filter.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.