Hi Folks, it has been some time since i asked my last question here and i learned a lot in the meantime, but i still feel like a bloody beginner from time to time. Here comes my Situation: I am filtering several logs from different sources and i am trying to deploy some kind of alerting for some …

[image] Dennis_Bohs: "fields" => { "env" => "ekp", "stage" => "prod" }, [fields] is an object that contains an [env] field. In logstash the way to refer to that is [fields][env], not [fields.env]. [fields.env] would refer to a field with a period embedded in its name.

Why is this (specific) mutate not working?

Elastic Stack Logstash

Dennis_Bohs (Dennis B) February 19, 2020, 3:18pm 10

anyone?
i even checked, if "fields.env" is a string. (it is)
checked, if something changes when i try to compare via =~ (it does not)

Topic		Replies	Views
Some problem of if and mutate in logstash filter Logstash	7	510	June 5, 2018
Logstash mutate not working Logstash	6	1540	July 6, 2017
Mutate \| Some logs are parsed some not Logstash	6	334	February 28, 2019
Logstash mutate replace filter fails Logstash	5	818	November 28, 2019
Logstash mutate filter, rename - "Exception in filterworker", "exception"=>#<IndexError: string not matched> Logstash	6	3171	July 6, 2017

Why is this (specific) mutate not working?

Related topics