Hi Roger,
Thanks for your help but I could not get the nxlog configuration to work.
I did solve my issue though!
For anyone else facing this I created a regular expression expression extracter (System->Inputs->Manage Extractors) on the Input to cut the text and move it into a new field named redundant. Regular expression (?=This event is generated)(.*$).
Then in System -> Configurations I edited the “Message Processors Configuration” order to raise “Message Filter Chain” above “Pipeline Processor”.
I then created a pipeline to remove the new field created by the extractor .
rule “remove extracted_field”
when
has_field(“redundant”)
then
remove_field(“redundant”);
end