1
response

We have a process that writes log info to a txt file. The process writes a blank line before and after its processing. What can be done to drop these lines from being included when nxlog sends to the log aggregator that we use?

AskedOctober 30, 2021 - 11:42pm

Answer (1)

Hey,

You may use regular expression against your empty line char, using an expression similar to:

<Exec>
        if $raw_event =~ /^your_regular_expression_here/  drop();
 </Exec>

Hope this helps.

Best regards,
Raf