Different "include_lines" for different files

I'm using Filebeat and its working great, now I need to change it configuration a little bit and I'm not sure how.
I want Filebeat to harvest different files, each file with a different "include_lines" configuration.

This is my filebeat.yml:

I want that for - C:\nexperience\logs\handsets\syslog.*.log
include_lines: ["Formulating"]

and for the other two:
include_lines: ["ERROR ", "WARN "]

All the other configurations are the same for both.

Thanks in advance!

If you want to use different include_lines, you have specific a new prospector for the different paths. It will mean in your case to duplicate the common configuration options in the prospectors.

This topic was automatically closed after 21 days. New replies are no longer allowed.