Is this legal?
output{
if "*error*" in [tags] or "*failure*" in [tags]{
stdout{ codec => rubydebug }
}
else{
# index in ES
}
}Did you try it?
Is this legal?
output{
if "*error*" in [tags] or "*failure*" in [tags]{
stdout{ codec => rubydebug }
}
else{
# index in ES
}
}Did you try it?
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.