Logstash filter section -
could please advise how filter specific words logstash 1.5? example, it's necessary filter following words: critical, exit, not connected. remember, in previous versions of logstash (i.e 1.4 , earlier) has been possible grep filter.
currently logstash.conf contains:
input { file { path => ["c:\exportq\export.log"] type => "exporter-log" codec => plain { charset => "cp1251" } start_position => "beginning" sincedb_path => "c:\progra~1\logstash\sincedb" } } filter { } output { stdout { codec => rubydebug } zabbix { zabbix_host => "vs-exp" zabbix_key => "log.exp" zabbix_server_host => "192.168.1.71" zabbix_value => "message" } } }
many in advance!
use conditional , drop filter delete matching messages.
filter { # simple substring condition if "boring" in [message] { drop { } } # regexp match if [message] =~ /boring/ { drop { } } }
Comments
Post a Comment