I am having problem with regular expression not working in filebeat 5.5
filebeat.prospectors:
- input_type: log
paths:
- D:\uat\beats\filebeat550\input_logs\tt_tradingserver\*
#use regular expression
exclude_files: ["TradingServer_.*Copy.*\.log$|TradingServer_[0-9]+Jun17.log$|TradingServer_[0-9]+Jul17.log$"]
I am excluding all logs files having Jul17, Jul17 and the word 'Copy' in its name
Below is the list of files available in the directory
TradingServer_01Aug17.log
TradingServer_01Jul17.log
TradingServer_01Jun17.log
TradingServer_02Aug17.log
TradingServer_02Jun17.log
TradingServer_03Aug17.log
TradingServer_03Jul17.log
TradingServer_04Jul17.log
TradingServer_04Jun17.log
TradingServer_05Jul17.log
TradingServer_05Jun17.log
TradingServer_06Jul17.log
TradingServer_06Jun17.log
TradingServer_07Jul17.log
But I am getting an error as
CRIT Exiting: No prospectors defined. What files do you want me to watch?
I have checked this regular expression in EditPlus as well on regular expression validation websites it is working fine there but not in FileBeats