Not able to include only required lines from filebeat


(Novice) #1

Filebeat experts:

I have gone through some existing forms topics to resolve the issue but i could not achieve it. From my log file, i wanted to extract only those line which has "Pub File" and "Published". I have provided below. I observed, it is extracting all the files from the log file. Can you please help what is missing in the filebeat.yml.

include_lines: ['Pub File', 'Published']


(Novice) #2

Further info, Even though the lines are matching with below, it is sending all the lines to target.

include_lines: ['^.Pub File.']

Somehow the * is not showing in the post i.e i have * after the .

Any thoughts?


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.