Altering indexer config to properly match on libvirtd files

The tags associated with libvirtd.txt in logstash are libvirtd.txt
and libvirt, the index config looked for libvirtd as the current
setup does not appear to match - we only have {%logmessage%} for message
content now. Setting search tag to 'libvirt'.

Change-Id: I27ae3b034581571285f42dab674ed85ff820cb6f
Partial-bug: 1350121
This commit is contained in:
pcrews 2014-08-01 13:31:34 -07:00
parent fbca077b50
commit c65bfd6d61
1 changed files with 1 additions and 1 deletions

View File

@ -77,7 +77,7 @@ filter {
match => { "message" => "\[(?<logdate>%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{YEAR}%{SPACE}%{TZ}?)\]%{SPACE}\[%{LOGLEVEL:loglevel}\]%{SPACE}%{GREEDYDATA:logmessage}" }
add_field => { "received_at" => "%{@timestamp}" }
}
} else if "libvirtd" in [tags] {
} else if "libvirt" in [tags] {
grok {
# libvirtd grok filter adapted from
# https://github.com/OpenStratus/openstack-logstash/blob/master/agent.conf