I want to collect the syslog which I really need before put them in the database ,can I set a prefilter ?
thank you !
yep. you can add a configuration in props and transforms on the indexer to filter the events.
see nullqueue filtering
View solution in original post