Different "include_lines" for different files


I'm using Filebeat and its working great, now I need to change it configuration a little bit and I'm not sure how.
I want Filebeat to harvest different files, each file with a different "include_lines" configuration.

This is my filebeat.yml:

I want that for - C:\nexperience\logs\handsets\syslog.*.log
include_lines: ["Formulating"]

and for the other two:
include_lines: ["ERROR ", "WARN "]

All the other configurations are the same for both.

Thanks in advance!

(ruflin) #2

If you want to use different include_lines, you have specific a new prospector for the different paths. It will mean in your case to duplicate the common configuration options in the prospectors.

(system) #3

This topic was automatically closed after 21 days. New replies are no longer allowed.