Splitting inputs

I will like to split input from UDP into two different output but have no idea how

For example:
Input A & B => Logstash UDP
Logstash UDP A => Output A
Logstash UDP B => Output B

You can use tags to create two pipelines based on conditionals or use the explicit multiple pipelines feature in Logstash (click here).

input {
udp { tags => 'input_1'}
udp { tags => 'input_2'}

filter {
 if 'input_1' in [tags] {
  do foo
 }
 else {
  do faa
 }
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.