Logstash filter section -


could please advise how filter specific words logstash 1.5? example, it's necessary filter following words: critical, exit, not connected. remember, in previous versions of logstash (i.e 1.4 , earlier) has been possible grep filter.

currently logstash.conf contains:

input { file {     path => ["c:\exportq\export.log"]     type => "exporter-log"     codec => plain {         charset => "cp1251"     }     start_position => "beginning"     sincedb_path => "c:\progra~1\logstash\sincedb"     } }  filter { }  output {     stdout { codec => rubydebug }     zabbix {         zabbix_host => "vs-exp"         zabbix_key => "log.exp"         zabbix_server_host => "192.168.1.71"         zabbix_value => "message"     } } } 

many in advance!

use conditional , drop filter delete matching messages.

filter {   # simple substring condition   if "boring" in [message] {     drop { }   }    # regexp match   if [message] =~ /boring/ {     drop { }   } } 

Comments

Popular posts from this blog

Magento/PHP - Get phones on all members in a customer group -

php - .htaccess mod_rewrite for dynamic url which has domain names -

Website Login Issue developed in magento -