I'm trying to exclude lines from apache log that contain /server-status?auto= within the line. It's a standard apache combined log file.
exclude_lines expressions I've tried:
as well as a few other iterations I can't remember along the way.
I even tried ['.'] and ['*'] in order to trigger excluding EVERYTHING in the log just to make sure it was actually processing but neither of those had any effect and the logs still were being picked up/inserted into ES.
Like several other posters, it works in Go, but when put into the apache2.yml file, it doesn't. I've also got exclude_files: [".gz$"] and in the debug logs, I can clearly see it excluding those files.
Example of a log line that I'd like to exclude:
example.site.com:80 192.168.0.1 - - [20/Dec/2017:10:18:37 -0500] "GET /server-status?auto= HTTP/1.1" 301 522 "-" "Go-http-client/1.1"
Any ideas what I'm missing?
Thanks in advance!