Hi Experts,
I am getting data from 10 sources, I want to send 3 source data to nullque.
I tried with below props.conf and transforms.conf configuration. But first source is filtering events from reset is not working.
vi props.conf
[source::ghcmapp]
[source::lsof]
[source::ps]
TRANSFORMS-null = setnull
vi transforms.conf
[setnull]
REGEX = .
DEST_KEY = queue
FORMAT = nullQueue
↧