How to discard logs by default in promtail?

[yosiasz]

please post sample logs and mark them keep or discard? look at this thread

Filtering out single line messages that have been parsed from a multi-line log

I think you are overthinking this a bit. I can think of two potential solutions: Log everything except batch job running. Something like this should work: pipeline_stages: - regex: expression: ^(?P<is_batch_job_running>batch\sjob\srunning)$ - labels: is_batch_job_running: - match: selector: '{is_batch_job_running=~"^batch\sjob\srunning$"}' action: drop drop_counter_reason: batch_job_running What is the motivation behind not wanting to log the batch job ru…