i have a file with following pattern : SERVICESTATE::CRITICAL , which updates everyday.
this file also has many other rows which does not have the above pattern.
i would like to only index the rows that match this pattern.
could i get help on how this can be done...
thanks,
john.
You believe you want to do - "Keep specific events and discard the rest". So follow instruction from below link and use appropriate REGEX for your pattern.