I have noticed (Logstash 6.4.2) that the file exclude option in the file input plugin does not handle files with dots in the filename.....
e.g. aaa.bbbb-ERRORS-yyyy-mm-dd.log
these work:
path => [ "C:/Elastic/TestAppLogs/*.log" ]
exclude => "*-ERRORS-*"
path => [ "C:/Elastic/TestAppLogs/*.log" ]
exclude => "*bbbb-ERRORS-*"
But including the '.' in the filter of the name doesn't match and therefore it is included in the input:
path => [ "C:/Elastic/TestAppLogs/*.log" ]
exclude => "aaa.bbbb-ERRORS-*"