Filter with Multiple Parsers - Which filter matched? #6060
Unanswered
derekmceachern
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I have a configuration where I'm running flb tailing the docker logs on a host and then parseing the data. Since there will be a number of different applications running on the host and even more log formats I need to be able to configure multiple parsers.
So far I've been able to do that using a FILTER with multiple parsers with the configuration below.
Is there a way to know which filter matched? Ideally I would like to change the output destination based on which filter matched the line. e.g. apache/apache2 logs I would like to send to elasticsearch, apache error logs to a different destination, etc.
Is there a way to accomplish this or am I going about it the wrong way?
Beta Was this translation helpful? Give feedback.
All reactions