5

Is it possible to use logstash filters in sequence? For example I want to parse message into json then newly created field split by character.

input => filter => filter => output => elasticsearch

Marcin
  • 231
  • 1
  • 6
  • 13

2 Answers2

7

Yes, it's mentioned in the official doc.

If you specify multiple filters, they are applied in the order of their appearance in the configuration file.

yyk
  • 130
  • 4
1

Yes. In filter conf file keep "field split by character" filter below the "json parsor" filter.

jijinp
  • 2,592
  • 1
  • 13
  • 15