Chain filters in logstash

Asked 27/11, 2015 at 14:36 Answered 28/11, 2015 at 0:26

Is it possible to use logstash filters in sequence? For example I want to parse message into json then newly created field split by character.

input => filter => filter => output => elasticsearch

Jugendstil answered 27/11, 2015 at 14:36 Comment(0)

Yes, it's mentioned in the official doc.

If you specify multiple filters, they are applied in the order of their appearance in the configuration file.

Seedbed answered 28/11, 2015 at 0:26 Comment(0)

Yes. In filter conf file keep "field split by character" filter below the "json parsor" filter.

Macaluso answered 27/11, 2015 at 14:57 Comment(0)