Hi, I have an elk stack mounted, which receives data from two filebeats.
I want to configure my filebeat configuration files so that it only collects files whose error is anything other than 500, and I have tried to do a grep on the "path" line, to try to touch the include or exclude lines ... but I keep getting the same logs, it does not exclude or include anything. What can be?
# Paths that should be crawled and fetched. Glob based paths.
paths:
- /server/www/html/*/logs/error.log | grep -v "200" | grep "2021"
#- c:\programdata\elasticsearch\logs\*
# Exclude lines. A list of regular expressions to match. It drops the lines that are
# matching any regular expression from the list.
exclude_lines: ['200']
# Include lines. A list of regular expressions to match. It exports the lines that are
# matching any regular expression from the list.
include_lines: ['400', '500']
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.