I am working with a multiline module. This particular file has 38 lines, but I'd like to only ship the lines that contain a colon. Is there a way to write an exec that if the line does not contain a colon then drop the line?
Here is my config so far:
HeaderLine /^---Begin event transaction---/
#EndLine /^---Event Reporting Complete---/
Exec $message = $raw_event; to_json();