less than a minute
You can use a filter to identify or discard logs or to protect sensitive data. As a result, filters can help reduce the agent’s resource load because of the reduced log ingestion. You can also use a filter to refine and transform collected logs before additional processing takes place.
Some input types offer additional filtering options that you can use to compliment the generic filters on this page. For example, when you create a Kubernetes input, you can add a filter in the input definition for a namespace or pod.
See the instructions for configuring an agent.
Combine existing filters into a single filter.
Identify logs with a specific field name and matching values.
Modify data as it is being streamed through the Edge Delta agent.
Drop specified JSON fields.
Extract specified JSON field.
Mask values based on regex.
Pass logs based on regex.
Match then split a single log into multiple logs.
Assign logs to sources using field mappings..
Filters that are in beta.