I'd like to exclude a given sequence of logs in Logstash or pass them to a separate index as they are created when the logfile itself is generated by a predefined procedure. Is this even possible? My approach is to process them using, e.g., the
grok filter and do some
if then else expression but I've got no idea how to establish a relation between, let's say, 5 successive lines.
Best regards and thanks in advance,