You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
in this case, all the events that contains a job:diego-cell field OR a source-type:other field will be sent to Sumo Logic
76
-
AND also
77
-
all the events that contains a source-type:other field OR an origin:rep field will be not sent to Sumo Logic
78
-
if an event share both filters (contains a Include-Only filter field and a Exclude-Always filter field), Only the *Include-Only filter will be considered*
55
+
It works this way:
56
+
***Case 1**:
57
+
**Include-Only filter**="" (_Empty_)
58
+
**Exclude-Always filter**="" (_Empty_)
59
+
In this case, _**all**_ the events will be sent to Sumo Logic
In this case, all the events that contains a _**job:diego-cell**_ field OR a _**source-type:other**_ field will be sent to Sumo Logic
75
+
**AND also**
76
+
All the events that contains a _**source-type:other**_ field OR an _**origin:rep**_ field will be not sent to Sumo Logic
77
+
78
+
If an event **share both filters** (contains a _Include-Only filter_ field and a _Exclude-Always_ filter field), Only the _**Include-Only**_ filter will be considered.
79
79
80
80
The correct way of using those flags will be something like this:
0 commit comments