Hi Elastic Team/Members,
I have almost 60 Logstash consumers (with unique consumers ID) in my PROD environment which are consuming from Kafka and sending to cloud, Big data lake and Splunk.
I have created a Kibana dashboard in which I wanted to see only consumers ID which are sending it only to Splunk (in numbers for quick reference and leadership updates) , not to cloud or Big data lake.
Currently it showing all consumers ID with details. I would like to see only consumer id which are sending to Splunk.
I will list out some Consumer ID
connect-kaka-connect-splunk-log source A
connect-kaka-connect-splunk-log source B
connect-kaka-connect-splunk-log source C
connect-kaka-connect-splunk-log source D
connect-kaka-connect-splunk-log source E
connect-kaka-connect-splunk-log source F
connect-kaka-connect-splunk-log source G
connect-kaka-connect-splunk-log source H
connect-kaka-connect-splunk-log source J
spark-352635-bdef- A
spark-352635-bdef- B
spark-352635-bdef- C
spark-352635-bdef- D
spark-352635-bdef- E
spark-352635-bdef- G
slt-archive-consumer group 1
slt-archive-consumer group 2
slt-archive-consumer group 3
slt-archive-consumer group 4
slt-archive-consumer group 5
slt-archive-consumer group 6
slt-archive-consumer group 7
slt-archive-consumer group 8
slt-archive-consumer group 9
Now I want to see only consumer ID that are starting with "connect-kaka-connect-splunk-log source" and would like to exclude "spark-352635-bdef' and "slt-archive-consumer group ".
Kindly help me how can I filter or exclude etc.
thanks
Regards,
Vivek