LogLevel DEBUG and INFO not required

We do not need DEBUG and INFO logs coming into ELK but only for one or more components e.g. hostname and index name.

From below link add exclude_lines for DEBUG and INFO - Exclude_lines: [‘^DEBUG’, ‘^INFO’] but to include some of hostname and index name which I think I need add include_lines: ['^hostname', '^indexname'] on filebeat.yml

Can some confirm and advice please.
Thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.