openstack
/
logstash-filters
Code Issues Proposed changes

Sync filter updates with system-config templates 

Pull in some changes that have merged in the system-config template
in preparation for converting system-config to use this project.

Change-Id: I84241379a88ea2a5c1bba6273ba063ae8615de99
This commit is contained in:
Jonathan Harker 2016-04-25 12:18:40 -07:00
parent 9729fb3840
commit 145bed2b9e
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
filters/indexer.conf
View File

@ -39,7 +39,12 @@ filter {
negate => false
# NOTE(mriedem): oslo.log 1.2.0 changed the logging_exception_prefix
# config option from using TRACE to ERROR so we have to handle both.
pattern => "^%{TIMESTAMP_ISO8601}%{SPACE}%{NUMBER}?%{SPACE}?(TRACE|ERROR)"
#
# NOTE(sdague): stack traces always include process id, so
# NUMBER being required element here is important, otherwise
# ERROR messages just fold into the previous messages, which are
# typically INFO.
pattern => "^%{TIMESTAMP_ISO8601}%{SPACE}%{NUMBER}%{SPACE}(TRACE|ERROR)"
what => "previous"
stream_identity => "%{host}.%{filename}"
}
@ -88,6 +93,7 @@ filter {
date {
match => [ "logdate",
"yyyy-MM-dd HH:mm:ss.SSS",
"yyyy-MM-dd HH:mm:ss.SSSSSS",
"yyyy-MM-dd HH:mm:ss,SSS",
"yyyy-MM-dd HH:mm:ss",
"MMM d HH:mm:ss",
@ -95,7 +101,8 @@ filter {
"dd/MMM/yyyy:HH:mm:ss Z",
"yyyy-MM-dd HH:mm:ss.SSSZ",
"E MMM dd HH:mm:ss yyyy Z",
"E MMM dd HH:mm:ss yyyy"
"E MMM dd HH:mm:ss yyyy",
"ISO8601"
]
timezone => "UTC"
}