Is it possible for filebeat to pick up only certain log entries? For ex, if my log entry contains the following: [2019-07-21:00:00:00] [INFO] [log message] [2019-07-21:00:00:01] [ERROR] [log message] Can I tell filebeat to pick up only the "ERROR" event? Any help is appreciated! Thanks

Can filebeat pick up log entries based on keywords?

Shaoranlaos (Christian Stockhaus) July 22, 2019, 4:50am 2

Don't know how performand it is but there is a n include_lines option in the configuration of the log input

Topic		Replies	Views
Single line with Filebeat to logstash Beats filebeat	2	1319	February 27, 2018
Not able to include only required lines from filebeat Beats filebeat	2	299	August 1, 2018
Include_lines doesn't seem to work Beats filebeat	3	1478	August 2, 2016
Filebeat Monitoring Log files Beats filebeat	4	656	August 31, 2018
Filebeat allow only specific line or content Beats filebeat	6	652	June 15, 2022