Hello,
I have to index only events that contains the string "$$log$$".
I try with a transforms like
[ignore]
REGEX = < a regex to match event not containing "$$log$$" >
DEST_KEY = queue
FORMAT = nullQueue
How can I wrote a "not match" regex (like !~ in perl)?
Thank's
Christian
↧