Can filebeat pick up log entries based on keywords?

Is it possible for filebeat to pick up only certain log entries?

For ex, if my log entry contains the following:

[2019-07-21:00:00:00] [INFO] [log message]

[2019-07-21:00:00:01] [ERROR] [log message]

Can I tell filebeat to pick up only the "ERROR" event?

Any help is appreciated!


Don't know how performand it is but there is a n include_lines option in the configuration of the log input


Thanks! I'll try this out.