ruby logstash filter plugin for 全局变量

  ruby {  init =>"@@ruby_tag= ''"   }

  if [xid] == 1 {
    elasticsearch {
      hosts => "192.168.88.63"
      index => "apps_tudouni_test"
      query_template => "/usr/local/logstash-6.4.0/bulu_sample_data/bulu_query.json"
      fields => { "userid" => "tag" }
   }
   ruby {
     code =>"@@ruby_tag= event.get('[tag]')"
   }
 }
  ruby { code =>"event.set('new_tag',@@ruby_tag)" }

  if [user_id] in [new_tag] {
        mutate { add_field => {"user_share_act" => "yes"} }
  }
  else {
        mutate { add_field => {"user_share_act" => "%{new_tag}"} }
   }
  #       mutate {remove_field => ["new_tag"] }
}