Filtering the logs

[M4RC02U1F4A4]

Hello,
is it possible to filter logs in a way that avoids importing too many events to Splunk?
In particular, I would like to import only the logs that match a given regex

Thanks,
Marco

[M4RC02U1F4A4]

It is possible to filter the logs by going to edit the configuration of OpenTelemtry Collector from here

splunk-otel-collector-chart/helm-charts/splunk-otel-collector/values.yaml

Line 433 in 22aa7e4

config: {}

Below is an example of a conf that collects only logs beginning with INFO

agent:
  config:
    processors:
      filter/severity_text:
        logs:
          include:
            match_type: regexp
            bodies:
            - ^INFO
            resource_attributes:
            - key: k8s.container.name
              value: test-log-container
    service:
      pipelines:
        logs:
          processors:
          - memory_limiter
          - k8sattributes
          - filter/logs
          - batch
          - resourcedetection
          - resource
          - resource/logs
          - resource/add_environment
          - filter/severity_text

[vojtechvelkjop]

Thanks a lot!