This way works as expected:
filebeat:
prospectors:
- paths:
- /var/log/test.log
input_type: log
document_type: testlog
close_renamed: true
exclude_lines: ['MYKEYWORD']
output:
file:
path: "/tmp"
filename: filebeat
This way works as expected:
filebeat:
prospectors:
- paths:
- /var/log/test.log
input_type: log
document_type: testlog
close_renamed: true
exclude_lines: ['MYKEYWORD']
output:
file:
path: "/tmp"
filename: filebeat
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.