recover logstash alert field

2024-02-28 18:51:40 +08:00 · 2024-02-28 18:51:40 +08:00 · d46ac183af
parent 142f3a822b
commit d46ac183af
1 changed files with 1 additions and 3 deletions
--- a/dev-upgrade/elastic/logstash-alert.yaml
+++ b/dev-upgrade/elastic/logstash-alert.yaml
@ -38,9 +38,7 @@ data:
      if [message] =~ "Unauthorized access" {
        drop {}  
      }
-      if [message] =~ "exchange refresh token" {
-        drop {}  
-      } 
+      

      mutate {
        split => { "[log][file][path]" => "/" }