Drop lines when matching a word (multiline)


(Sylvio de cezare) #1

Hey

i have a log file i used the multiline filter to drop all the lines before the matched word

filter {
  multiline {
    type => "somefiletype"
    pattern => "\W*(Copy complete.)\W*"
    what => "previous"
  }
}

i want to drop all lines before the (Copy complete) also i want to drop the word itself
how can i do this ?

thank you!


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.