mirror of
https://github.com/elastic/logstash.git
synced 2025-04-24 14:47:19 -04:00
parent
f87da37e16
commit
257e3ce117
1 changed files with 44 additions and 21 deletions
65
docs/static/transforming-data.asciidoc
vendored
65
docs/static/transforming-data.asciidoc
vendored
|
@ -443,30 +443,39 @@ For example:
|
||||||
+
|
+
|
||||||
[source,json]
|
[source,json]
|
||||||
--------------------------------------------------------------------------------
|
--------------------------------------------------------------------------------
|
||||||
"geoip" => {
|
filter {
|
||||||
"timezone" => "Europe/Moscow",
|
geoip {
|
||||||
"ip" => "83.149.9.216",
|
source => "clientip"
|
||||||
"latitude" => 55.7522,
|
}
|
||||||
"continent_code" => "EU",
|
}
|
||||||
"city_name" => "Moscow",
|
|
||||||
"country_code2" => "RU",
|
|
||||||
"country_name" => "Russia",
|
|
||||||
"dma_code" => nil,
|
|
||||||
"country_code3" => "RU",
|
|
||||||
"region_name" => "Moscow",
|
|
||||||
"location" => [
|
|
||||||
[0] 37.6156,
|
|
||||||
[1] 55.7522
|
|
||||||
],
|
|
||||||
"postal_code" => "101194",
|
|
||||||
"longitude" => 37.6156,
|
|
||||||
"region_code" => "MOW"
|
|
||||||
}
|
|
||||||
--------------------------------------------------------------------------------
|
--------------------------------------------------------------------------------
|
||||||
|
|
||||||
<<plugins-filters-http,http filter>>::
|
<<plugins-filters-http,http filter>>::
|
||||||
|
|
||||||
Provides integration with external web services/REST APIs.
|
Integrates with external web services/REST APIs, and
|
||||||
|
enables lookup enrichment against any HTTP service or endpoint.
|
||||||
|
The <<plugins-filters-http,http filter>> is well suited to many enrichment use
|
||||||
|
cases, such as social APIs, sentiment APIs, security feed APIs, and business
|
||||||
|
service APIs.
|
||||||
|
+
|
||||||
|
[source,txt]
|
||||||
|
-----
|
||||||
|
filter {
|
||||||
|
http {
|
||||||
|
url => "http://example.com"
|
||||||
|
verb => GET
|
||||||
|
body => {
|
||||||
|
"user-id" => "%{user}"
|
||||||
|
"api-key" => "%{api_key}"
|
||||||
|
}
|
||||||
|
body_format => "json"
|
||||||
|
headers =>
|
||||||
|
"Content-type" => "application/json"
|
||||||
|
}
|
||||||
|
target_body => "new_field"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
-----
|
||||||
|
|
||||||
<<plugins-filters-jdbc_static,jdbc_static filter>>::
|
<<plugins-filters-jdbc_static,jdbc_static filter>>::
|
||||||
|
|
||||||
|
@ -573,7 +582,21 @@ filter {
|
||||||
|
|
||||||
<<plugins-filters-memcached,memcached filter>>::
|
<<plugins-filters-memcached,memcached filter>>::
|
||||||
|
|
||||||
Provides integration with external data in Memcached.
|
Enables key/value lookup enrichment against a Memcached object caching system.
|
||||||
|
It supports both read (GET) and write (SET) operations. It is a notable addition
|
||||||
|
for security analytics use cases. For example, you can use this plugin to query
|
||||||
|
for a value, and set it if not found.
|
||||||
|
+
|
||||||
|
[source,txt]
|
||||||
|
-----
|
||||||
|
filter {
|
||||||
|
memcached {
|
||||||
|
url => "http://example.com"
|
||||||
|
verb => GET
|
||||||
|
body => {TODO-complete example
|
||||||
|
}
|
||||||
|
}
|
||||||
|
-----
|
||||||
|
|
||||||
<<plugins-filters-translate,translate filter>>::
|
<<plugins-filters-translate,translate filter>>::
|
||||||
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue