How to blacklist the .gz files in input.conf?

[sagar_shubham23]

Hi Folks,

I am trying to backlist the gz files in input.conf. But somehow the blacklist doesn't work properly.

Files to blacklist: 

/var/log/abc.log-20200512.gz

/var/log/abc.log-20200510.gz

/var/log/messages-20200319.gz

I tried this. 

[monitor:///var/log/*

crcSalt=<SOURCE>

blacklist1=\.gz$

But this did not work for some of the files that is mentioned above.

Please help with the correct way to blacklist the .gz file.

[bmack]

Did this ever get resolved?  I applied blacklist = \.gz$ and it is not working for me.

[richgalloway]

The way I read the manual, the blacklist1 setting is only for WinEventLog inputs.  Use blacklist (without a digit) for monitor inputs.

[monitor:///var/log/*]
crcSalt = <SOURCE>
blacklist = \.gz$

[sagar_shubham23]

I did the same as suggested but didnot work.

Thanks