Keep only certain line

Elastic Stack Logstash
1

Hello,

I use filebeat to send files to logstash and then logstash parse them.

During the parse, is it possible to do :

if [number_line != "3" ]
{
  drop { }
}

To keep only the line 3 of the file ?

Thx you

2

No. Filebeat doesn't track the line number, only the file offset.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.