ycz
/
OKR
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

logstal filter field drop

main
ycz008 2024-03-01 14:35:39 +08:00
parent 7519497f6f
commit d17bbf7e18
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
dev-upgrade/elastic/logstash-alert.yaml
View File

@ -41,6 +41,9 @@ data:
if [message] =~ "exchange refresh token" { if [message] =~ "exchange refresh token" {
drop {} drop {}
} }
if [message] =~ "No sess token provided" {
drop {}
}
mutate { mutate {
split => { "[log][file][path]" => "/" } split => { "[log][file][path]" => "/" }
add_field => { "env" => "%{[log][file][path][3]}" } add_field => { "env" => "%{[log][file][path][3]}" }