Hi Ahmed, you can try doing this using a custom snippet (see http://docs.graylog.org/en/2.1/pages/collector_sidecar.html#snippets).
Cheers, Jochen On Friday, 30 September 2016 21:03:35 UTC+2, Ahmed Shibani wrote: > > Hello; > > Is it possible to exclude files based on a regular expression when > creating a Beats input in GrayLog 2.1? > > For example, my current filebeat input looks like this: > > filebeat: > prospectors: > - document_type: apache_domlogs > fields: > gl2_source_collector: 084fabcd-fb99-4001-a5a6-ddd86f90e5a7 > ignore_older: 0 > input_type: log > paths: > - /etc/httpd/domlogs/* > scan_frequency: 10s > tail_files: true > > > What I would like to achieve is to exclude all files in the > /etc/httpd/domlogs/ that ends with "bytes_log", something like this: > > filebeat: > prospectors: > - document_type: apache_domlogs > fields: > gl2_source_collector: 084fabcd-fb99-4001-a5a6-ddd86f90e5a7 > ignore_older: 0 > input_type: log > paths: > - /etc/httpd/domlogs/* > exclude_files: "\\-bytes_log$" > scan_frequency: 10s > tail_files: true > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/72befc76-1ec4-4970-91b2-20e0ddd87da0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
