ruby { init =>"@@ruby_tag= ''" }
if [xid] == 1 {
elasticsearch {
hosts => "192.168.88.63"
index => "apps_tudouni_test"
query_template => "/usr/local/logstash-6.4.0/bulu_sample_data/bulu_query.json"
fields => { "userid" => "tag" }
}
ruby {
code =>"@@ruby_tag= event.get('[tag]')"
}
}
ruby { code =>"event.set('new_tag',@@ruby_tag)" }
if [user_id] in [new_tag] {
mutate { add_field => {"user_share_act" => "yes"} }
}
else {
mutate { add_field => {"user_share_act" => "%{new_tag}"} }
}
# mutate {remove_field => ["new_tag"] }
}
ruby logstash filter plugin for 全局变量
最新推荐文章于 2024-07-09 08:49:10 发布