Topbeat limit filter


(andres camilo ) #1

hello i need help i am new
I'm trying to add a threshold to the topbeat logstash filter, I want to add a message to tags but do not add it to me
This is the filter I have:

filter {
if "topbeat" in [tags]{
if [{mem}{used} > 1] {
mutate {
add_tag => ["memory_full"]
}
}
}
}


(Mark Walkom) #2

Topbeat has been deprecated and you should really upgrade to metricbeat.

Also I don't believe that the field reference {mem}{used} is valid, see https://www.elastic.co/guide/en/logstash/6.2/event-dependent-configuration.html


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.