28 lines
803 B
XML
28 lines
803 B
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<TimberWinR>
|
|
<Inputs>
|
|
<WindowsEvents>
|
|
<Event source="System,Application" binaryFormat="PRINT" />
|
|
</WindowsEvents>
|
|
<Logs>
|
|
<Log name="First Set" location="C:\Logs1\*.log" />
|
|
<Log name="Second Set" location="C:\Logs2\*.log" recurse="0" splitLongLines="OFF" />
|
|
<Log name="Third Set" location="C:\Logs2\1.log,C:\Logs2\2.log" />
|
|
</Logs>
|
|
|
|
<IISW3CLogs>
|
|
<IISW3CLog name="Default site" location="c:\inetpub\logs\LogFiles\W3SVC1\*" />
|
|
</IISW3CLogs>
|
|
</Inputs>
|
|
|
|
<Filters>
|
|
<Grok>
|
|
<Match field="Text" value="%{IPAddress:ip1} %{IPAddress:ip2}" />
|
|
<AddField name="field1" value="%{foo}" />
|
|
<DropIfMatch value="true" />
|
|
<RemoveField value="ip1" />
|
|
</Grok>
|
|
</Filters>
|
|
|
|
</TimberWinR>
|