Skip to main content
Ent+
This feature is available as an add-on for the Honeycomb Enterprise plan. Please contact your Honeycomb account team for details.

Filter by Regex Processor

The Filter by Regex processor can be used to include or exclude logs based on Regex matching body fields. This processor is exclusive to the Google license.
Enterprise and Free users should use the Filter By Condition processor, which has more robust filtering.
MetricsLogsTraces
FieldDescription
ActionThe action to take when the filter condition is met. Include will retain matching logs. Exclude will remove matching logs.
RegexThe regular expression (Regex) that logs will be evaluated against.
MatchThe type containing the field the Regex will be evaluated against. Options are “Body” and “Attributes”.
Field (Body)If Field Type is set to “body”, this is the name of the body field Regex will be evaluated against. Leave empty to apply to the entire body.
Field (Attributes)If Field Type is set to “attributes”, this is the name of the attribute field Regex will be evaluated against.

Example Configuration

In this example, we exclude logs that have the body field “path” matching this Regex: .+(?:ql).

Web Interface

Honeycomb Docs - Filter by Regex Processor - image 1

Standalone Processor

apiVersion: bindplane.observiq.com/v1
kind: Processor
metadata:
  id: filter_regex
  name: filter_regex
spec:
  type: google_filter_regex
  parameters:
    - name: action
      value: exclude
    - name: regex
      value: '.+(?:ql)'
    - name: field_type
      value: 'Body'
    - name: body_field
      value: 'path'