input {
  file {
                type => vampserror
        path => "/home/ampsErrorLog/getError/*"
                start_position => "beginning"
                }
}

filter {

grok {
        patterns_dir => ["./patterns"]
        match => {  "message" => "%{LOGLEVEL:level} %{MESSAGE:msg} %{TIMESTAMP:timestamp}" }


}
    }
    if "ERR_AUTH_PORTAL_USER" in [msg]{

    }



    }

}

output {

  stdout { codec => rubydebug }
}