I would try to see if you can do something like this:
Code: Select all
tcp {
host => ...
port => ...
type => ...
}
To limit to what type you want it to forward on. Outputs aren't something we've spent a large amount of time testing, as we try to make sure our product covers all of your logging concerns. Let me know if this doesn't work, and we can keep looking in to it!