Ignoring the First Line of a log
When ingesting a logfile is it possible to ignore the first line of the logfile. In my case the first line is:
<?xml version="1.0" encoding="utf-8" ?>
and is completely screwing up the log import particularly the field parsing.
-
I've used an exclusion rule on the collector not to collect message that match the following regex:
<\?xml version="1.0" encoding="utf-8" \?>
I know the above regex is correct but it still imports the first line of the logfile which contains:
<?xml version="1.0" encoding="utf-8" ?>
Help!
Please sign in to leave a comment.
Comments
1 comment