github-mirrors/logstash
1
0
Fork 0
mirror of https://github.com/elastic/logstash.git synced 2025-04-24 22:57:16 -04:00
Code Issues Projects Releases Packages Wiki Activity

Enable 'negate' modifier for multiline filter so that you can do more complex multi-line event matching

Browse source
This commit is contained in:
Ryan Ausanka-Crues 2011-01-22 16:08:21 -08:00
parent c09d5e2021
commit b1701cb37d
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/logstash/filters/multiline.rb
View file

@ -97,6 +97,9 @@ class LogStash::Filters::Multiline < LogStash::Filters::Base
pending = @pending[key] pending = @pending[key]
@logger.debug(["Reg: ", typeconfig["pattern"], event.message, match]) @logger.debug(["Reg: ", typeconfig["pattern"], event.message, match])
# Add negate option
match = match and !typeconfig["negate"] || !match and typeconfig["negate"]
case typeconfig["what"] case typeconfig["what"]
when "previous" when "previous"
if match if match