Skip to content

Instantly share code, notes, and snippets.

@ferblape
Last active August 29, 2015 14:05
Show Gist options
  • Select an option

  • Save ferblape/e39352d1fde781d8d2f4 to your computer and use it in GitHub Desktop.

Select an option

Save ferblape/e39352d1fde781d8d2f4 to your computer and use it in GitHub Desktop.
Logstash query language

Elastic search query language documentation

Summary

  • equal operator is :client_ip:xxx.xxx.xxx.xxx AND http_verb:POST

  • comparation operators should be placed after the :client_ip:xxx.xxx.xxx.xxx AND http_status_code:>=400

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment