Revision as of 00:51, 22 November 2018

External

_sourceCategory = "DevBase/OpsLog/"

_collector="OpsLog"

_sourceCategory = "DevBase/OpsLog/" and _sourceHost = "/up/dev01/fds" and _collector = "OpsLog"

_collector="Prod CloudWatch" | parse "*driver response card account" as message

Revision as of 00:43, 22 November 2018 (view source) Ovidiu (talk \| contribs) No edit summary ← Older edit		Revision as of 00:51, 22 November 2018 (view source) Ovidiu (talk \| contribs) No edit summary Newer edit →
Line 11:		Line 11:
	_sourceCategory = "DevBase/OpsLog/" and _sourceHost = "/up/dev01/fds" and _collector = "OpsLog"		_sourceCategory = "DevBase/OpsLog/" and _sourceHost = "/up/dev01/fds" and _collector = "OpsLog"

	_collector="Prod CloudWatch" ~~and _sourceHost =~~ "~~/up/prod/fds~~"		_collector="Prod CloudWatch" \| parse "*driver response card account" as message