sonalyze parse without options says it respects a bunch of record filters but it does not
Closed this issue · 0 comments
lars-t-hansen commented
The problem is that by default (without merge-by-job or merge-by-host or clean), parse
rereads the stream and then dumps it verbatim without filtering. This makes sense for filters applied to merged data but not record filters, which can be applied just fine here. It is a change from the Rust code, which would apply the record filter in this case.
As a workaround, one can use -clean in many cases.