Vector VRL for Journald to Drop xino spam

journald-drop-overlayfs-spam.yaml

data_dir: "/var/lib/vector"
sources:
    journald:
        type: journald

transforms:
    drop_xino_events:
        type: remap
        inputs:
            - journald
        source: |
           .overlay = contains!(.message,"overlayfs:")
           if .overlay {
              abort
           }
sinks:
    nats:
        type: nats
        inputs:
            - drop_xino_events
        subject: "vector.{{host}}"
        url: nats://nats
        encoding:
           codec: json
api:
    enabled: true
    address: "127.0.0.1:8686"