as I edit props.conf & transforms.conf to remove header of log , but it didn't work
here is my config:
props.conf
[sourcetype]
TRANSFORMS-skiphdr= setnull
transforms.conf
[setnull]
REGEX =
DEST_KEY = queue
FORMAT = nullQueue
Is there any idea or suggestion?
↧