I have one input field in which contain boardName and I don’t want to match regex as ".*tester.*" . How we can write grok filter to do not match boardname which contain "tester" name.
input json is
first input
{
boardname : "sys-tester-log1",
logSnippet:" fdsffdsfdsfdsd",
location : "rack1"
}
second input
{
boardname : "tcpdump-tester-log1",
logSnippet:" fdsffdsfdsfdsd",
location : "rack1"
}
thirt input json
{
boardname : "tcpdump-client-log1",
logSnippet:" fdsffdsfdsfdsd",
location : "rack1"
}
I want grok filter to check boardName and I don’t want to dump json in ES if boardName contains tester name