topic Re: Blacklist inputs.conf is not working.. in Getting Data In

Blacklist inputs.conf is not working..

jay_s — Mon, 25 Jan 2021 17:32:26 GMT

Greetings!

I am dealing with following directory structure;

var/log/myfolder/log-type_a.log
var/log/myfolder/log-type_b.log
var/log/myfolder/log-type_b1.log
var/log/myfolder/log-type_b2.log
var/log/myfolder/log-type_c.log

I want block log-type_b.log,log-type_b1.log, log-type_b2.log

My inputs.conf

[default]
index = my_default_index
[blacklist:/var/log/myfolder/log-type_b*]

I have tried different variations for blacklist

[blacklist:///var/log/myfolder/log-type_b*]

The above blacklist stanza is not working. Please let me know what am I missing.

Re: Blacklist inputs.conf is not working..

ericjorgensenjr — Mon, 25 Jan 2021 18:15:29 GMT

Try this.

inputs.conf:

[monitor:///var/log/myfolder/] index = my_default_index blacklist = log-type_b

Re: Blacklist inputs.conf is not working..

jay_s — Mon, 25 Jan 2021 18:51:09 GMT

after trying few options
[blacklist:/var/log/myfolder/log-type_b]

seems to be working