I have these 2 group:
[monitor:///pack/jboss/server/edu01_*/logs/server.log]
sourcetype = server_log
index = myindex
[monitor:///pack/jboss/server/staging_xxx/log/server.log]
sourcetype = server_log
index = anothterindex
list monitor only show:
/pack/jboss/server/edu01_xxx/logs/server.log
/pack/jboss/server/edu01_yyy/logs/server.log
REST API (8089) show:
parent /pack/jboss/server/staging_xxx/log/server.log
type Did not match partial whitelist '^/pack/jboss/server/edu01_[^/]*/log/server.log$'.
I looks like it's using the same rule for both. I want to separate these rules.
... View more