Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save colinsurprenant/af6ff0d17e856f29a4464567bba6a310 to your computer and use it in GitHub Desktop.
Save colinsurprenant/af6ff0d17e856f29a4464567bba6a310 to your computer and use it in GitHub Desktop.
input { stdin {} }
filter {
if [field1a] == "cond1a" {
drop {}
}
if [field1a] == "cond1b" {
drop {}
}
if [field1a] == "cond1c" {
drop {}
}
if [field1a] == "cond1d" {
drop {}
}
if [field1a] == "cond1e" {
drop {}
}
if [field1a] == "cond1f" {
drop {}
}
if [field1a] == "cond1g" {
drop {}
}
if [field1a] == "cond1h" {
drop {}
}
if [field1a] == "cond1i" {
drop {}
}
if [field1a] == "cond1j" {
drop {}
}
if [field1a] == "cond1k" {
drop {}
}
if [field1a] == "cond1l" {
drop {}
}
if [field1a] == "cond1m" {
drop {}
}
if [field1a] == "cond1n" {
drop {}
}
if [field1a] == "cond1o" {
drop {}
}
if [field1a] == "cond1p" {
drop {}
}
if [field1a] == "cond1q" {
drop {}
}
if [field1a] == "cond1r" {
drop {}
}
if [field1a] == "cond1s" {
drop {}
}
if [field1a] == "cond1t" {
drop {}
}
if [field1a] == "cond1u" {
drop {}
}
if [field1a] == "cond1v" {
drop {}
}
if [field1a] == "cond1w" {
drop {}
}
if [field1a] == "cond1x" {
drop {}
}
if [field1a] == "cond1y" {
drop {}
}
if [field1a] == "cond1z" {
drop {}
}
if [field1a] == "cond1aa" {
drop {}
}
if [field1a] == "cond1ab" {
drop {}
}
if [field1a] == "cond1ac" {
drop {}
}
if [field1a] == "cond1d" {
drop {}
}
if [field1a] == "cond1e" {
drop {}
}
if [field1a] == "cond1af" {
drop {}
}
if [field1a] == "cond1ag" {
drop {}
}
if [field1a] == "cond1ah" {
drop {}
}
if [field1a] == "cond1ai" {
drop {}
}
if [field1a] == "cond1aj" {
drop {}
}
if [field1a] == "cond1ak" {
drop {}
}
if [field1a] == "cond1al" {
drop {}
}
if [field1a] == "cond1am" {
drop {}
}
if [field1a] == "cond1an" {
drop {}
}
if [field1a] == "cond1ao" {
drop {}
}
if [field1a] == "cond1ap" {
drop {}
}
if [field1a] == "cond1aq" {
drop {}
}
if [field1a] == "cond1ar" {
drop {}
}
if [field1a] == "cond1as" {
drop {}
}
if [field1a] == "cond1at" {
drop {}
}
if [field1a] == "cond1au" {
drop {}
}
if [field1a] == "cond1av" {
drop {}
}
if [field1a] == "cond1aw" {
drop {}
}
if [field1a] == "cond1ax" {
drop {}
}
if [field1a] == "2cond1a" {
drop {}
}
if [field1a] == "2cond1b" {
drop {}
}
if [field1a] == "2cond1c" {
drop {}
}
if [field1a] == "2cond1d" {
drop {}
}
if [field1a] == "2cond1e" {
drop {}
}
if [field1a] == "2cond1f" {
drop {}
}
if [field1a] == "2cond1g" {
drop {}
}
if [field1a] == "2cond1h" {
drop {}
}
if [field1a] == "2cond1i" {
drop {}
}
if [field1a] == "2cond1j" {
drop {}
}
if [field1a] == "2cond1k" {
drop {}
}
if [field1a] == "2cond1l" {
drop {}
}
if [field1a] == "2cond1m" {
drop {}
}
if [field1a] == "2cond1n" {
drop {}
}
if [field1a] == "2cond1o" {
drop {}
}
if [field1a] == "2cond1p" {
drop {}
}
if [field1a] == "2cond1q" {
drop {}
}
if [field1a] == "2cond1r" {
drop {}
}
if [field1a] == "2cond1s" {
drop {}
}
if [field1a] == "2cond1t" {
drop {}
}
if [field1a] == "2cond1u" {
drop {}
}
if [field1a] == "2cond1v" {
drop {}
}
if [field1a] == "2cond1w" {
drop {}
}
if [field1a] == "2cond1x" {
drop {}
}
if [field1a] == "2cond1y" {
drop {}
}
if [field1a] == "2cond1z" {
drop {}
}
if [field1a] == "2cond1aa" {
drop {}
}
if [field1a] == "2cond1ab" {
drop {}
}
if [field1a] == "2cond1ac" {
drop {}
}
if [field1a] == "2cond1d" {
drop {}
}
if [field1a] == "2cond1e" {
drop {}
}
if [field1a] == "2cond1af" {
drop {}
}
if [field1a] == "2cond1ag" {
drop {}
}
if [field1a] == "2cond1ah" {
drop {}
}
if [field1a] == "2cond1ai" {
drop {}
}
if [field1a] == "2cond1aj" {
drop {}
}
if [field1a] == "2cond1ak" {
drop {}
}
if [field1a] == "2ond1al" {
drop {}
}
if [field1a] == "2cond1am" {
drop {}
}
if [field1a] == "2cond1an" {
drop {}
}
if [field1a] == "2cond1ao" {
drop {}
}
if [field1a] == "2cond1ap" {
drop {}
}
if [field1a] == "2cond1aq" {
drop {}
}
if [field1a] == "2cond1ar" {
drop {}
}
if [field1a] == "2cond1as" {
drop {}
}
if [field1a] == "2cond1at" {
drop {}
}
if [field1a] == "2cond1au" {
drop {}
}
if [field1a] == "2cond1av" {
drop {}
}
if [field1a] == "2cond1aw" {
drop {}
}
if [field1a] == "2cond1ax" {
drop {}
}
}
output { stdout { codec => rubydebug {} } }
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment