exclude some field from $raw_event
Tags:
format log
#1
gogi100
i have a log with format time, date, description. how i can exclude time and date from $raw_event. i just need field description?
#1
gogi100
i have a log with format time, date, description. how i can exclude time and date from $raw_event. i just need field description?
You can use a regexp for this.
Exec if $raw_event =~ /...(.*)/ $raw_event = $1;
See the User Guide.