11-09-20 07:46 AM
if [event][EventType] == 1 or [event][EventType] == 4 or [event][EventType] == 3 {
file {
path => "D:\Log\Session-Queue_logs_%{+YYYY-MM-dd}.txt"
codec => line { format => "%{event}"}
}
}
Answered! Go to Answer.
15-09-20 01:53 AM
15-09-20 01:53 AM