Is it possible to drop some text with Filebeat


#1

Hello, just for confimation, would it be possible to tell Filebeat to drop some text in a line instead of the whole line?
The exclude_line configuration parameter works just fine when you need to drop an entire line from your logs, but what if I need to drop only some text (based on a Regex expression) before sending the data to Logstash?
From the documentation I don't think there is a viable solution other than manipulating the logs before sending them to Filebeat. Am I correct?


(Andrew Kroh) #2

Correct, you need to use Filebeat + Logstash for this use case.


(system) #3

This topic was automatically closed after 21 days. New replies are no longer allowed.