You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
使用ilogtail 采集信息, processors 处理规则 如下:
processors:
Type: processor_json
SourceKey: content
KeepSource: true
ExpandConnector: ""
Type: processor_grok
SourceKey: content
Match:
KeepSource: false
IgnoreParseFailure: true
Type: processor_filter_regex_native
FilterKey:
FilterRegex:
错误如题:这里是说 processor_filter_regex_native 不能放在processor_grok之后处理。
那通过 processor_grok 提取数据字段后,无法通过指定多个字段 来过滤不想要的数据吗(白名单)
看了processor_filter_regex 插件无法满足,多个条件过滤的场景。
"processor_filter_regex processor插件可以实现对日志的过滤。一条日志只有完全匹配Include中的正则表达式,且不匹配Exclude中的正则表达式时才会被采集,否则直接丢弃。"
有没有什么解决的方法?
Beta Was this translation helpful? Give feedback.
All reactions