Upgrade Logstash to 1.2.1.
* modules/logstash/manifests/init.pp: Download and install Logstash 1.2.1. * modules/openstack_project/files/logstash/log-gearman-client.py: Logstash 1.2.1 comes with a new schema. Update the job data sent to log push workers to better accomodate the new schema. * modules/openstack_project/files/logstash/log-gearman-worker.py: Push Logstash 1.2.1 schema compliant JSON to the Logstash TCP input. * modules/openstack_project/templates/logstash/indexer.conf.erb: Logstash 1.2.1 comes with a new schema and many input and filter changes. Use the newly supported features like conditionals to keep the config up to date. * modules/kibana/templates/config.rb.erb: Change the default field for kibana to 'message'. It was @message which is deprecated in the new logstash schema. Change-Id: Id19fc05bcce8d42c5c0cf33df3da7e95f5794107
This commit is contained in:
parent
c7932eaf20
commit
d69b469b11
|
@ -40,7 +40,7 @@ module KibanaConfig
|
|||
|
||||
# Change which fields are shown by default. Must be set as an array
|
||||
# Default_fields = ['@fields.vhost','@fields.response','@fields.request']
|
||||
Default_fields = ['@message']
|
||||
Default_fields = ['message']
|
||||
|
||||
# If set to true, Kibana will use the Highlight feature of Elasticsearch to
|
||||
# display highlighted search results
|
||||
|
@ -49,7 +49,7 @@ module KibanaConfig
|
|||
# A field needs to be specified for the highlight feature. By default,
|
||||
# Elasticsearch doesn't allow highlighting on _all because the field has to
|
||||
# be either stored or part of the _source field.
|
||||
Highlighted_field = "@message"
|
||||
Highlighted_field = "message"
|
||||
|
||||
# Make URLs clickable in detailed view
|
||||
Clickable_URLs = true
|
||||
|
@ -122,10 +122,10 @@ module KibanaConfig
|
|||
# field called _all that is searched when no field is specified.
|
||||
# Dropping _all can reduce index size significantly. If you do that
|
||||
# you'll need to change primary_field to be '@message'
|
||||
Primary_field = '@message'
|
||||
Primary_field = 'message'
|
||||
|
||||
# Default Elastic Search index to query
|
||||
Default_index = '@message'
|
||||
Default_index = 'message'
|
||||
|
||||
# TODO: This isn't functional yet
|
||||
# Prevent wildcard search terms which result in extremely slow queries
|
||||
|
|
Loading…
Reference in New Issue