We are ingesting the our CPanel system's Apache logs with Filebeat's handy apache module. Our configuration is as follows:
var.paths: - "/var/log/apache2/domlogs/*"
However, I've hit a snag. I need to grab all files in this directory except logs containing -bytes. For example, one site would have the following logs in /var/log/apache2/domlogs/:
something.example.com something.example.com-bytes_log something.example.com-ssl_log
How can I tell filebeat to pickup something.example.com, something.example.com-ssl_log, but not something.example.com-bytes_log? I'm sure there is a way, but I don't see how to say match unless the file contains "-bytes"