Hi everybody,
I'd like to exclude a given sequence of logs in Logstash or pass them to a separate index as they are created when the logfile itself is generated by a predefined procedure. Is this even possible? My approach is to process them using, e.g., the grok
filter and do some if then else
expression but I've got no idea how to establish a relation between, let's say, 5 successive lines.
Best regards and thanks in advance,
Hisushi