Can filebeat pick up log entries based on keywords?

yungnvn · July 22, 2019, 4:13am

Is it possible for filebeat to pick up only certain log entries?

For ex, if my log entry contains the following:

[2019-07-21:00:00:00] [INFO] [log message]

[2019-07-21:00:00:01] [ERROR] [log message]

Can I tell filebeat to pick up only the "ERROR" event?

Any help is appreciated!

Thanks

Shaoranlaos · July 22, 2019, 4:50am

Don't know how performand it is but there is a n include_lines option in the configuration of the log input

yungnvn · July 26, 2019, 6:46pm

Thanks! I'll try this out.

system · August 23, 2019, 6:46pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.