According to the documenation I should be able to use the "exclude_lines" option to filter specific events. I've setup my filebeat.yml to exclude any entries that start with my load balancer IP, but they still forward to logstash. paths: - /var/log/httpd/access_log document_type: apache-ac…

Thanks Tudor I just did a yum repo check and found that it was still on 1.01 and 1.1 was available. Oddly I had checked this earlier to day and it said I was up to date...although I didn't check the version number. Short answer: yup this was the issue and applying the 1.1 update fixed it.

Cool, that's because we just released 1.1 about two hours ago :slight_smile: [image] Beats 1.1.0 & Winlogbeat released | Elastic Today, we announce new versions of the entire Elastic Stack, including a tighter integration of Shield with Kibana and an updated version of ES-Hadoop. Det…

Hi, A log file have INFO/DEBUG/ERROR. But i want to exclude debug logs to forward, but still its forwarding. Using filebeat-5.0.0-alpha3 exclude_lines: ["^DEBUG"] Example json log: {"@logdate":"2016-07-05T15:15:50.772+05:30","message":"methodName()","logger_name":"com.app","thread_name":"main",…

Discuss the Elastic Stack

Using the exclude_lines option

Elastic Stack Beats

tudor (Tudor Golubenco) February 2, 2016, 7:18pm 2

Just to be sure, you are on filebeat 1.1.0, right? The config looks good to me.

Topic		Replies	Views
Include_lines and exclude_lines not working as expected Beats filebeat	2	721	May 7, 2019
Filebeat exclude line not working :( Beats filebeat	7	12421	January 31, 2018
Filebeat Exclude_lines config not working Beats filebeat	5	559	January 31, 2019
Filebeat exclude_lines is not working on Openshift Beats filebeat	2	338	May 26, 2021
Exclude_lines are not working in my filebeat Beats filebeat	3	674	February 20, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Using the exclude_lines option

Related topics