[systemd-devel] Fwd: Remove specific journal file filter

[Vito Caputo]

On Wed, Jun 16, 2021 at 11:24:55PM +0530, mihir bhatt wrote:
> Hi Team,
> 
> I am using *sd_journal_add_match()* API to add filter into journal files.
> Is there any way to remove/modify existing filter rather than remove all
> using *sd_journal_flush_matches().*
> 
> *For example :*
> 
> Current method:
> 
> To remove F_3 :
> sd_journal_add_match( j , "F_1" , 4);
> sd_journal_add_match( j , "F_2" , 4);
> sd_journal_add_match( j , "F_3" , 4);
> sd_journal_add_match( j , "F_4" , 4);
> .....
> 
> sd_journal_flush_matches().
> 
> sd_journal_add_match( j , "F_1" , 4);
> sd_journal_add_match( j , "F_2" , 4);
> sd_journal_add_match( j , "F_4" , 4);
> .... N Filters
> 

No, you only additively combin ematches in the existing API, simply
restarting with a clean slate w/flush as needed.

Regards,
Vito Caputo