我面临logstash过滤器的问题：我想设置如下条件：

filter {
       if [SPCI] == 79 {
            mutate {
                 replace => { "RSRP79" => "%{SRSRP}" }
                 replace => { "RSRQ79" => "%{SRSRQ}" }
                   }
       }

我的数据集看起来像：

{
  "took": 29,
  "timed_out": false,
  "_shards": {
    "total": 1,
    "successful": 1,
    "skipped": 0,
    "failed": 0
  },
  "hits": {
    "total": 22656,
    "max_score": null,
    "hits": [
      {
        "_index": "processed.radiosignal",
        "_type": "_doc",
        "_id": "v_FJQnYBEKhQVcwaCsCy",
        "_version": 26,
        "_score": null,
        "_source": {
          "ElapsedRT": 0,
          "Alt": 0,
          "Row": 0,
          "RSRP116": "0",
          "NRSRP": -103,
          "@version": "1",
          "Handover": 0,
          "Time": "2020.12.08-11.34.49.14",
          "NRSRQ": -13,
          "SPCI": 79,
          "SRSRP": -100,
          "@timestamp": "2020-12-15T17:31:29.080Z",
          "SRSRQ": -11,
          "RSRP79": "0",
          "NPLMN": "nullnull",
          "NPCI": 116,
          "RSRQ116": "0",
          "Lat": 0,
          "Long": 0,
          "RSRQ79": "0"
        },
        "fields": {
          "@timestamp": [
            "2020-12-15T17:31:29.080Z"
          ]
        },
        "sort": [
          1608053489080
        ]
      }

查询未按预期执行，并且 if SRSRP == 79 正在失败。我对麋鹿很陌生，不知道问题出在哪里。澄清一下，我正在创造 RSRP79 以及 RSRQ79 在上一步中使用alterplugin的字段，工作正常。