cyxop
(James)
April 10, 2019, 6:25pm
1
I am adding fields to event using
mutate { add_field }
When I try to ship it adding event in mapping, I get an error:
http {
http_method => "post"
url => "http://endpoint "
mapping => {
"event" => "%{event}"
"sourcetype" => "logstash"
}
}
If I do not add event - nothing comes accross
Badger
April 10, 2019, 7:24pm
2
What error do you get? What does the event look like if you use?...
output { stdout { codec => rubydebug } }
cyxop
(James)
April 10, 2019, 8:21pm
3
I see output when I use rubydebug and assign every value inside the event like this:
output {
http {
http_method => "post"
url => "http://myurl "
mapping => {
"event" => {
"message" => "%{MESSAGE}"
"cluster" => "MY_CLUSTER"
}
}
}
stdout {
codec => rubydebug
}
}
But when I try to pass original message like this - I get an error:
output {
http {
http_method => "post"
url => "http://myurl "
mapping => {
"event" => "%{event}"
"cluster" => "MY_CLUSTER"
}
}
stdout {
codec => rubydebug
}
}
system
(system)
Closed
May 8, 2019, 8:34pm
4
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.