Hi, I'm using ELK 7.4.0. I want to use dynamic variables in logstash configuration file. Plan A: There is an input plugin called elasticsearch for querying elasticsearch, can I use input from a file and then put its output as input to the elasticsearch input plugin? How? OR Plan B: Can I use in…

Here's the solution: input{ stdin{} } filter{ grok{ match => { "message" => "(?<ip>%{IP})%{GREEDYDATA}" } } elasticsearch { hosts => ["localhost:9200"] index => ["index*"] result_size => 100 query => "xforwarded1:%{ip} AND @timestamp:[n…

Discuss the Elastic Stack

Use of variables in a query in logstash

Elastic Stack Logstash

system (system) Closed June 22, 2020, 8:21am 15

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Accessing/comparing fields from two different input plugins in filter, simultaneously Logstash	11	1144	June 22, 2020
Input Elasticsearch Query in logstash Logstash	2	405	July 6, 2017
How to query elasticsearch and take some fields from old data Logstash	3	7637	March 17, 2017
Logstash query template Logstash	11	5219	September 1, 2017
Feed one input event into another input Logstash	1	645	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Use of variables in a query in logstash

Related topics