title: How do I set a conditional in grok/logstash for when there is a upstream response and not
body: <p>How do I set a conditional in logstash with the grok filter for when there is upstream response and when there is not.</p>
  
  <p>I want to use this when there is.</p>
  
  <pre><code> match =&gt; { "message" =&gt; "%{COMBINEDAPACHELOG}  %{NUMBER:request_time:float} %{NUMBER:upstream_time:float}" }
  </code></pre>
  
  <p>When there is no response.</p>
  
  <pre><code>match =&gt; { "message" =&gt; "%{COMBINEDAPACHELOG}  %{NUMBER:request_time:float}"}
  </code></pre>