How to wildcard filter?

Elastic Stack Logstash
1

Hi. I have a question.

I want to use a filter using a wildcard in logstash.

/a.php /bphp /c.php /abc/abc.php /bcd/bcd.php

I would like to drop this part because such unwanted logs as above are being collected.

if "/*.php" in [request]{
Drop{}
}
use if "/*/*.php" in [request]{
Drop{}
}

The filter did not apply when specified in the above format.

What should I do?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.