Newbie to ELK Stack and Filebeat here. Managed to get log shipping from my linux hosts working fine and have 2x prospectors for my syslogs and secure logs as going to try filtering them in logstash differently. Anyway, I have a service running on all servers (NRPE for Nagios) which puts syslog ent…

Correction - I have got it to work. I'm not sure why but on my test lab it wasn't filtering it out, but when I tried this with one of my live systems with just a single agent it filtered it out OK! I then tried with the below and that also worked filtering out multiple entires. exclude_lines: …

Discuss the Elastic Stack

Cant get regex to exclude line to work

Elastic Stack Beats

tudor (Tudor Golubenco) August 2, 2017, 8:46am 2

Can you paste also an example log line created by NRPE?

Topic		Replies	Views
Exclude_lines in filebeat does not work? Beats filebeat	9	1003	January 16, 2023
Filebeat not excluding lines? Beats filebeat	7	3367	January 18, 2017
Include_lines and exclude_lines not working as expected Beats filebeat	2	721	May 7, 2019
Exclude line regex wont work Beats filebeat	5	1097	October 26, 2017
Exclude_lines are not working in my filebeat Beats filebeat	3	674	February 20, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Cant get regex to exclude line to work

Related topics