Filter with Multiple Parsers - Which filter matched? #6060
Unanswered
derekmceachern
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I have a configuration where I'm running flb tailing the docker logs on a host and then parseing the data. Since there will be a number of different applications running on the host and even more log formats I need to be able to configure multiple parsers.
So far I've been able to do that using a FILTER with multiple parsers with the configuration below.
Is there a way to know which filter matched? Ideally I would like to change the output destination based on which filter matched the line. e.g. apache/apache2 logs I would like to send to elasticsearch, apache error logs to a different destination, etc.
Is there a way to accomplish this or am I going about it the wrong way?
Beta Was this translation helpful? Give feedback.
All reactions