Hey
i have a log file i used the multiline filter to drop all the lines before the matched word
filter {
multiline {
type => "somefiletype"
pattern => "\W*(Copy complete.)\W*"
what => "previous"
}
}
i want to drop all lines before the (Copy complete) also i want to drop the word itself
how can i do this ?
thank you!