Get some log in file but not all in filebeat

Elastic Stack Beats
1

Hello everyone, i have a problem to collect log from Filebeat to Logstash. The problem is that in the log file that I configure, I only want to get the log messages about the user's login and the other logs won't be fetched by Filebeat.
For example: I have a sample log

1. 2022-11-15 11:12:06,872 15024 INFO user1 addons: Login success for user1 login:administrator from 127.0.0.1
2. 2022-11-15 11:12:06,872 15024 INFO user2 addons: Login failed for user2 login:administrator from 127.0.0.1
3. 2022-11-15 11:12:06,872 15024 Error user3 addons: Some error from server

Now, I only want Filebeat to get the log lines from user 1 and user 2 and don't want to log from user 3. Is there any way I can do this.
Thanks everyone

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.