I am trying log monitoring in Dynatrace and want to create a processing rule
I want Processor definition to filter out one field in the log monitoring in Dynatrace for now am using below query
PROCESSOR DEFINITION:-
FILTER_OUT(CONTAINS(content, “business_id”))
LOG SAMPLE:-
{
“event.type”: “LOG”,
“content”: “{“@timestamp”:1718024230175,”_document_id”:”hgKL16o4xY4NGGakZ8khVg”,”action”:”api.request”,”actor”:”nhs-argocd[bot]”,”actor_id”:163553506,”actor_ip”:”35.197.226.17″,”actor_is_bot”:true,”actor_location”:{“country_code”:”GB”},”application_name”:null,”business”:”deloitte-global”,”business_id”:6899,”created_at”:1718024230175,”hashed_token”:”neywJcg4Fk0XXHi6U+4uquqSghO4zkCl9bg1BxH3K4Q=”,”integration”:””,
“status”: “NONE”,
“timestamp”: “1718030483610”,
“log.source”: “ECR GitHub Audit Logs – Production”,
“loglevel”: “NONE”,
“dt.auth.origin”: “dt0c01.CIXG2VGRQGWK7XJSOHGKMAVM”
}
RESULT WHEN AM TESTING THE RULE IS [ ]
I want to filter out logs by the “business_id” field
Anamika Anand is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.