Filter: Project tail on attribute value

This filter allows you to remove the last events using an attribute.

Version

  • 6.12.1

Availability requirements

  • The input log is available.
  • The input log has at least one event.

Configuration panel

The attribute can be selected on the top left, the values on the middle left, and on the bottom left we can select to filter in (remove all events succeeding the last event that has a matching attribute value) or filter out (remove all events ending with the last event that has a matching attribute value). Statistics on the values of the selected attribute are shown on the right.

Sample result

Leave a Reply