I am a Newbie in using Logstash and Elasticsearch. Recently, I got a job which parse some logs and put them into Elasticsearch. And before putting them in, I need to using information of every line to retrieve external information from MySQL. I want to know what's the best way to do this?
I know I could use the official ruby filter or exec filter(put the query code in a file). But I am not familiar with ruby and I don't know whether use exec filter will make the processing slow.
Could anyone help me?