如何在logstash if语句中使用和条件

Question

我需要在logstash过滤器中使用and，我正在执行类似的操作

if "domain" in [message] and "[100]" in [message] { drop { } } but its not working getting configuration error 

我也尝试过if "domain" and "[100]" in [message] { drop { } }，但未删除任何日志

我在做什么错？

Answer 1

尝试以下操作，

if [message] == "domain" and [message] == "100" {
   drop { }
}