[
    {
        "path": "/eks/pod/running",
        "clientIP": "1.139.21.123",
        "method": "POST"
    },
    {
        "path": "/cmdb/login",
        "clientIP": "1.139.21.123",
        "method": "PUT"
    },
    {
        "path": "/cmdb/start",
        "clientIP": "1.139.21.123",
        "method": "GET"
    }
]

//path contains 'cmdb' characters, keep the log, filter out the rest
log_keep(regex_match(v("path"),regex="cmdb",full=False))
//method contains POST or PUT characters, keep the log
log_keep(regex_match(v("method"),regex="POST|PUT",full=False))

{
"clientIP":"1.139.21.123",
"method":"PUT",
"path":"/cmdb/login"
}