From 878667cc2d85b504587d8d7f8e2b5bdeac508573 Mon Sep 17 00:00:00 2001
From: "Andrey A." <56412611+aantti@users.noreply.github.com>
Date: Fri, 23 Jan 2026 17:58:30 +0100
Subject: [PATCH] fix: filter out realtime healtcheck logging and increase hc
 interval

---
 docker/docker-compose.yml      | 3 ++-
 docker/volumes/logs/vector.yml | 8 +++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 5925702d2f5..6625bf365be 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -212,8 +212,9 @@ services:
           "curl -sSfL --head -o /dev/null -H \"Authorization: Bearer ${ANON_KEY}\" http://localhost:4000/api/tenants/realtime-dev/health"
         ]
       timeout: 5s
-      interval: 5s
+      interval: 30s
       retries: 3
+      start_period: 10s
     environment:
       PORT: 4000
       DB_HOST: ${POSTGRES_HOST}
diff --git a/docker/volumes/logs/vector.yml b/docker/volumes/logs/vector.yml
index da7858ed3d9..e79d7e82685 100644
--- a/docker/volumes/logs/vector.yml
+++ b/docker/volumes/logs/vector.yml
@@ -104,11 +104,17 @@ transforms:
           .timestamp = to_timestamp!(parsed.time)
           .metadata.host = .project
       }
+  # Filter out healthcheck logs from Realtime
+  realtime_logs_filtered:
+    type: filter
+    inputs:
+      - router.realtime
+    condition: '!contains(string!(.event_message), "/health")'
   # Realtime logs are structured so we parse the severity level using regex (ignore time because it has no date)
   realtime_logs:
     type: remap
     inputs:
-      - router.realtime
+      - realtime_logs_filtered
     source: |-
       .metadata.project = del(.project)
       .metadata.external_id = .metadata.project