1. 程式人生 > >logstash 利用drop 丟棄過濾日誌

logstash 利用drop 丟棄過濾日誌

               
input {    stdin {    }}filter {       grok {            match => ["message","\s*%{TIMESTAMP_ISO8601}\s+(?<Level>(\S+)).*"]            }        if [Level] == "DEBUG" {                drop {}                }        if [Level] == "INFO" {                        drop {}                }}output { stdout {  codec=>rubydebug{}   } }~   利用drop 丟棄過濾日誌