Logstash 1.5.0:
Trying to add field "visualComplete" along with value and output to ELK but don't see any field with this name. Am I not doing it correctly.
The beginning of your filter is correct, though access existing fields would be %{fieldname} ....
From your example I don't see how you are creating the array of varables, Are you parsing the data prior to this filter ? Or I think you might find the option XPATH more to your liking
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.