diff --git a/dev-upgrade/elastic/logstash-alert.yaml b/dev-upgrade/elastic/logstash-alert.yaml index 9c9d0ce..7447412 100644 --- a/dev-upgrade/elastic/logstash-alert.yaml +++ b/dev-upgrade/elastic/logstash-alert.yaml @@ -44,6 +44,9 @@ data: if [message] =~ "No sess token provided" { drop {} } + if [message] =~ "Servlet.service" { + drop {} + } mutate { split => { "[log][file][path]" => "/" } add_field => { "env" => "%{[log][file][path][3]}" }