**Hi, I am collecting the data below, and I using the UF in the client. Actually I only want the data except "0_Packet_2017-05-29.txt", and I tried the blacklist to do this. However there was something wrong when I writing the blacklist regex.
Text:
40100_Packet_2017-05-29.txt
40110_Packet_2017-05-29.txt
40120_Packet_2017-05-29.txt
40130_Packet_2017-05-29.txt
40140_Packet_2017-05-29.txt
0_Packet_2017-05-29.txt
I have tried these way but failed :
Does any one have a great solution to only black the "0_Packet_2017-05-29.txt" ? Thansk for help!
If you're blacklisting a file named like that then it should look like this:
[monitor:///path/to/files/*.txt]
blacklist = \d{1}_Packet_\d{4}-\d{2}-\d{2}\.txt
There isn't a "Reg_Packet" in your example Data just "Packet"s
If this is data within one file then you'll have to use SEDCMD in props like this:
[sourcetypeName]
SEDCMD-redacted = s/\d{1}_Packet_\d{4}-\d{2}-\d{2}\.txt//g
I aplogized that I didn't described the question properly.
blacklist = \d{1}_Packet_\d{4}-\d{2}-\d{2}\.txt
caused it will block the file within 0's name, like 40100, 40110...etc, too.Here is a regex online website, and I put my example on there.
I screenshot the result applied your blacklist regex cmd, but it doesn't work.
Result: https://www.dropbox.com/s/8is9hhmlz7ye0v8/0_reg%20blacklist.png?dl=0