A filter plugin is used to perform transformations on the data. It allows you to combine one or more plugins, and the order of the plugins defines the order in which the data is transformed. It acts as the intermediate section between input and output, and it's an optional section in the Logstash configuration. The list of available filter plugins out of the box is as follows:
|
logstash-filter-de_dot |
logstash-filter-dissect |
logstash-filter-dns |
logstash-filter-drop |
|
logstash-filter-elasticsearch |
logstash-filter-fingerprint |
logstash-filter-geoip |
logstash-filter-grok |
|
logstash-filter-http |
logstash-filter-jdbc_static |
logstash-filter-jdbc_streaming |
logstash-filter-json |
|
logstash-filter-mutate |
logstash-filter-metrics |
logstash-filter-memcached |
logstash-filter-kv |
|
logstash-filter-ruby |
logstash-filter-sleep |
logstash-filter-split |
logstash-filter-syslog_pri |
|
logstash-filter-throttle |
logstash-filter-translate |
logstash-filter-urldecode |
logstash-filter-truncate |
|
logstash-filter-aggregate |
logstash-filter-anonymize |
logstash-filter-xml |
logstash-filter-useragent |
|
logstash-filter-date |
logstash-filter-csv |
logstash-filter-clone |
logstash-filter-cidr |
|
logstash-filter-anonymize |
logstash-filter-aggregate |
|
Details of each of the preceding plugins and a list of the other available plugins that are not part of the default distribution can be found at https://www.elastic.co/guide/en/logstash/7.0/filter-plugins.html.