We have a situation where our machine logs based on user input..A user clicks a button,it logs and click another it logs to another line.So say a user click 5 times ..we have 5 line logs..I know filebeat read line by line and keeps an offset of the last line it read.The question is how to configure not to read line by line and not send the event to Logstash. But should read the lines when the regex pattern is found..
Would value an honest answer if filebeat can do that.Or this any other tool that can be used for this
I wonder if you could use multiline here in some way? How do you know it's the last time the user wrote a log line and the event should be sent?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.