What's the best way to add some additional information from Logstash to Elasticsearch

Elastic Stack Logstash
1

Hi All

I am a Newbie in using Logstash and Elasticsearch. Recently, I got a job which parse some logs and put them into Elasticsearch. And before putting them in, I need to using information of every line to retrieve external information from MySQL. I want to know what's the best way to do this?

I know I could use the official ruby filter or exec filter(put the query code in a file). But I am not familiar with ruby and I don't know whether use exec filter will make the processing slow.

Could anyone help me?

2

Perhaps you can use the translate filter? While that filter can't look up information in MySQL you might be able to periodically generate static files that the translate filter supports.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.