fluent / fluent/fluent-bit

Impossible to filter Windows logs by EventID using grep filter

Open
#7,271 6 comments 1 reaction 1 assignee Claimed by @cosmo0920 View on GitHub
docs issue enhancement
Dominant language
C
Stars
8.1k
Forks
2k
Avg merge
4d 20h
Merged PRs (30d)
71

Description

## Bug Report

**Describe the bug**
It is impossible to filter Windows logs by EventID using grep filter.

**To Reproduce**
Simple configuration to reproduce the issue:
```
[INPUT]
Name winlog
Channels Windows PowerShell
Tag win
Interval_Sec 1

[FILTER]
Name grep
Match win
Exclude EventID 800

[OUTPUT]
Name file
Match win
Path .\logs\
```

**Expected behavior**
Successful filtering by EventID using grep filter.

**Your Environment**
OS: Win 10 Pro 10.0.19041
FluentBit: fluent-bit-2.0.9-win64

**Additional context**
Related issue: https://github.com/fluent/fluent-bit/issues/6284

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.