ycz
/
OKR
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

logstal filter field drop

main
ycz008 2024-03-01 14:35:39 +08:00
parent 7519497f6f
commit d17bbf7e18
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
dev-upgrade/elastic/logstash-alert.yaml
View File

@ -41,6 +41,9 @@ data:
if [message] =~ "exchange refresh token" {
drop {}
}
if [message] =~ "No sess token provided" {
drop {}
}
mutate {
split => { "[log][file][path]" => "/" }
add_field => { "env" => "%{[log][file][path][3]}" }
@ -147,4 +150,4 @@ spec:
targetPort: 5044
selector:
app: logstash-alert
type: ClusterIP
type: ClusterIP