Hi,
I have some set of events that has keywords like "inbound message" and "outbound message". the events looks something like this .
2010-02-20 14:12:45.642 | INFO | qtp413909515-1424 - /aaaaaaaaaaaaaaa | uuid:aaaaaaaa | vice.InServiceSOAP.InServicePort | 74 - org.apache.cxf.cxf-core - 3.0.4.redhat-621169 | Inbound Message. I want such event only to be index.
on the indexer side, i have created as such but it is not working. how to resolve this ?
In transforms :
[test]
REGEX = Inbound
DEST_KEY = queue
FORMAT = indexQueue
props
[testsource]
TRANSFORMS-set= test
↧