Unexpected behavior when accessing field data in a pipeline-to-pipeline configuration

Elastic Stack Logstash
1

Hello
I receive events from Filebeat and want to send it to the pipeline whose name matches the data from one of the event fields, for example

input {  beats {  port => "5000"  }  }
output {
    if [event][module] {
      pipeline { send_to => "%{[event][module]}" }
    }        
    else {
      pipeline { send_to => fallback }
    }
}

but got this error

[WARN ][org.logstash.plugins.pipeline.PipelineBus] Attempted to send event to '%{[event][module]}' but that address was unavailable. Maybe the destination pipeline is down or stopping? Will Retry.

The event.module field definitely exists, since the error occurs inside if

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.