Hello,
I'm having trouble to determine the type of dynamically created fields with kv filter.
My config looks like this:
input {
beats {
port => 5044
}
}
filter {
grok {
match => { "message" => "%{COMBINEDAPACHELOG}"}
}
kv {
field_split => "&?"
type => "string"
source => "request"
}
}
output {
elasticsearch {
hosts => "localhost:9200"
}
}
But logstash is compaining:
Cannot create pipeline {:reason=>"The setting type in plugin kv is obsolete and is no longer available. You can achieve this same behavior with the new conditionals, like: `if [type] == "sometype" { kv { ... } }
How could I determine the type?
Thanks