My input file contains 10 lines of logs, out of which need to parse only 5 logs based on a string, say example: NAS.
So, out of 10 logs only 5 logs which contains keyword "NAS" should parse and go to elasticsearch.
I couldn't find any suitable filter for this. Can you please help me suggesting a filter.
Thanks in advance.
My log format:
000331 Tue Mar 30 09:21:07 2021 7F9ACBCCC700 INFO NAS tasks/nas/nas_proc.c :0309 Received NAS UPLINK DATA IND from S1AP for ue_id = (1) 000332 Tue Mar 30 09:21:07 2021 7F9ACBCCC700 INFO NAS-EM tasks/nas/emm/sap/emm_as.c :0176 EMMAS-SAP - Received primitive EMMAS_DATA_IND (214) 000333 Tue Mar 30 09:21:07 2021 7F9ACBCCC700 INFO NAS-EM tasks/nas/emm/sap/emm_as.c :0621 EMMAS-SAP - Received AS data transfer indication (ue_id=0x00000001, delivered=true, length=19)