Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

blacklisting file with pattern in the filename

$
0
0
Hello, We would like to exclude some files from indexing using blacklist. At the moment it looks as follows and works fine `blacklist =rtedump|_alert_|available\.log$|nameserver_history\.trc$|table_consistency_check|\.(?i:gz|json|old|py|tar|txt|xml|zip)$` I would like to additionally exclude the user traces, which can be identified as having the following ending pattern (checked in regex101.com): `[ICDicd]\d{6,}\.trc` How would the new blacklist have to look like? Would it be just the extension of the existing one and look as follows? `blacklist =[ICDicd]\d{6,}\.trc|rtedump|_alert_|available\.log$|nameserver_history\.trc$|table_consistency_check|\.(?i:gz|json|old|py|tar|txt|xml|zip)$` Kind Regards, Kamil

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>