Ignoring the First Line of a log

Follow

Ian Dale

• March 31, 2022 03:23

When ingesting a logfile is it possible to ignore the first line of the logfile. In my case the first line is:

<?xml version="1.0" encoding="utf-8" ?>

and is completely screwing up the log import particularly the field parsing.

 

 

0

• 

  Ian Dale

  • March 31, 2022 07:19

  I've used an exclusion rule on the collector not to collect message that match the following regex:

  <\?xml version="1.0" encoding="utf-8" \?>

  I know the above regex is correct but it still imports the first line of the logfile which contains:

  <?xml version="1.0" encoding="utf-8" ?>

  Help!

   

   

   

  0

  Comment actions Permalink

Please sign in to leave a comment.