As the result in my logstash.conf I can't use the field e.g.
if [\"collector] {} or
if ["collector] {} or
if [collector] {}
Solution for the problem
In the code of this adapter quotes aren't removed.
Using the following environment variable
- LOGSTASH_FIELDS=collector=logspout
solves the problem
I wanted to add some custom fields to my logspout-generated events.
The Readme says:
So my compose file:
Problem is: logspout-logstash doesn't remove the quotes for my field collector
Looking at the available fields for my index in elasticsearch:
As the result in my logstash.conf I can't use the field e.g. if [\"collector] {} or if ["collector] {} or if [collector] {}
Solution for the problem In the code of this adapter quotes aren't removed. Using the following environment variable
- LOGSTASH_FIELDS=collector=logspout
solves the problemPlease change the Readme or fix this in the code