Index only rows that match a pattern

[jiaqya]

i have a file with following pattern : SERVICESTATE::CRITICAL , which updates everyday.
this file also has many other rows which does not have the above pattern.
i would like to only index the rows that match this pattern.
could i get help on how this can be done...

thanks,
john.

[somesoni2]

You believe you want to do - "Keep specific events and discard the rest". So follow instruction from below link and use appropriate REGEX for your pattern.

http://docs.splunk.com/Documentation/Splunk/7.1.1/Forwarding/Routeandfilterdatad#Keep_specific_event...