I have a monitor set up in inputs.conf on my UF as follows
[monitor:///log/test]
blacklist = ppd.*\.log$|prod.*\.log$
sourcetype = service_log
index = nptest1
/log/test also contains some subdirectories I was to ignore, named application- or server- how can I edit my blacklist to ignore directories that end in a hyphen?
Thanks!
↧