Unexpected behavior when accessing field data in a pipeline-to-pipeline configuration

I receive events from Filebeat and want to send it to the pipeline whose name matches the data from one of the event fields, for example

input {  beats {  port => "5000"  }  }
output {
    if [event][module] {
      pipeline { send_to => "%{[event][module]}" }
    else {
      pipeline { send_to => fallback }

but got this error

[WARN ][org.logstash.plugins.pipeline.PipelineBus] Attempted to send event to '%{[event][module]}' but that address was unavailable. Maybe the destination pipeline is down or stopping? Will Retry.

The event.module field definitely exists, since the error occurs inside if

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.