[Journald input] Update `include_matches` to reach feature parity with what is exposed by `journalctl`

elastic / beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

https://www.elastic.co/products/beats

Other

12.14k stars 4.91k forks source link

[Journald input] Update `include_matches` to reach feature parity with what is exposed by `journalctl` #40185

Open belimawr opened 2 months ago

belimawr commented 2 months ago

https://github.com/elastic/beats/pull/40061 is changing how we read journals in the journald input, as part of this change include_matches.and and include_matches.or have been removed and a simpler matchers implementation has been added.

This issue is about achieving feature parity with the functionalities provided by journalctl.

elasticmachine commented 2 months ago

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)