I use pattern parser for logs. For example:
| pattern '<source> - <user> [<timestamp>] "<method> <url> <type>" <status> <bytes>'
How can i get log lines only with unique
I use pattern parser for logs. For example:
| pattern '<source> - <user> [<timestamp>] "<method> <url> <type>" <status> <bytes>'
How can i get log lines only with unique
Not sure exactly what you mean, can you provide an example?
For example log:
192.168.0.1 - data_1
192.168.0.2 - data_2
192.168.0.1 - data_3
192.168.0.2 - data_4
192.168.0.3 - data_5
192.168.0.3 - data_6
I want to get only rows with unique IP on first match, as a result I would get
192.168.0.1 - data_1
192.168.0.2 - data_2
192.168.0.3 - data_5