Can filebeat pick up log entries based on keywords?

Is it possible for filebeat to pick up only certain log entries?

For ex, if my log entry contains the following:

[2019-07-21:00:00:00] [INFO] [log message]

[2019-07-21:00:00:01] [ERROR] [log message]

Can I tell filebeat to pick up only the "ERROR" event?

Any help is appreciated!


Don't know how performand it is but there is a n include_lines option in the configuration of the log input


Thanks! I'll try this out.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.