Exclude a sequence of logs


(Maren Sonnenschein) #1

Hi everybody,

I'd like to exclude a given sequence of logs in Logstash or pass them to a separate index as they are created when the logfile itself is generated by a predefined procedure. Is this even possible? My approach is to process them using, e.g., the grok filter and do some if then else expression but I've got no idea how to establish a relation between, let's say, 5 successive lines.

Best regards and thanks in advance,

Hisushi


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.