Log Insight Agent : Excluding Events with Blacklist

As you probably know, the Log Insight agent allows you to explicitly include or exclude:

  • filelog: log files within a directory
  • winlog: Windows event viewer channels

One question I received at VMworld was if you could explicitly include or exclude:

  • filelog: certain log messages from within a log file
  • winlog: certain events from within Windows event viewer channels

In this post, I will provide the answer. Read on to learn more!

li-agent-logo

Continue reading