Two if conditions in one line

Elastic Stack Logstash
1

Hi,

I want to add an if condition for two timestamps. I want to say that if either of them don't match then the message should be dropped.

if ![log_timestamp] {

    #     drop {}
    # }

    # if !([log_timestamp2]) {
    #     drop {}
    # }

Both conditions need to be checked together or else the msgs with log_timestamp2 getting dropped. Can you please suggest how that can be done. How to use an "or" between the two conditions

2

Documentation and examples: https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#conditionals

3

Thanks a lot. Its correctly parsing now :slight_smile:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.