A newbies guide to ELK – Part 3 – Logstash Structure & Conditionals

https://blog.mwpreston.net/2018/01/04/a-newbies-guide-to-elk-part-4-logstash-conditionals/
good 4 part series, wished for more though.