multiple patterndb definitions

Tags:

#1 wallet

I want to use pattern matching on different streams, and have different patterndb xml file, like this ...

Filter for system logs

<Processor client_filter> Module pm_pattern PatternFile /data/conf/patterndb.xml </Processor>

Filter for SEQ

<Processor seq_filter> Module pm_pattern PatternFile /data/conf/seq_pattern.xml </Processor>

#Filter for RDS <Processor rds_filter> Module pm_pattern PatternFile /data/conf/rds_pattern.xml </Processor>

and call them like this...

<Route route2001> Path client2001 => client_filter => client_to_sumo,judo-sumo-uat,client_master </Route>

<Route route2002> Path client2002 => seq_filter => client_to_sumo,judo-sumo-uat,client_master </Route>

etc...

Is that possible? It doesn't seem to be working as I hoped.

#2 rafDeactivated Nxlog ✓
#1 wallet
I want to use pattern matching on different streams, and have different patterndb xml file, like this ... Filter for system logs <Processor client_filter> Module pm_pattern PatternFile /data/conf/patterndb.xml </Processor> Filter for SEQ <Processor seq_filter> Module pm_pattern PatternFile /data/conf/seq_pattern.xml </Processor> #Filter for RDS <Processor rds_filter> Module pm_pattern PatternFile /data/conf/rds_pattern.xml </Processor> and call them like this... <Route route2001> Path client2001 => client_filter => client_to_sumo,judo-sumo-uat,client_master </Route> <Route route2002> Path client2002 => seq_filter => client_to_sumo,judo-sumo-uat,client_master </Route> etc... Is that possible? It doesn't seem to be working as I hoped.

Thank you for sharing the question with Presales team.

One of our engineers will pick it up soon.

Thank you,
Raf