Add logstash rules to parse libvirtd.txt
Change-Id: I09185dae08d46821f804e3ad43205205aab9345c
This commit is contained in:
parent
c7de59e895
commit
bdd4fc245c
@ -279,3 +279,6 @@ source-files:
|
|||||||
- screen
|
- screen
|
||||||
- apachecombined
|
- apachecombined
|
||||||
job-filter: '.*grenade.*'
|
job-filter: '.*grenade.*'
|
||||||
|
- name: logs/libvirtd.txt
|
||||||
|
tags:
|
||||||
|
- libvirtd
|
||||||
|
@ -78,6 +78,13 @@ filter {
|
|||||||
add_field => { "logdate" => "%{timestamp}" }
|
add_field => { "logdate" => "%{timestamp}" }
|
||||||
add_field => { "logmessage" => "%{verb} %{request} %{response}" }
|
add_field => { "logmessage" => "%{verb} %{request} %{response}" }
|
||||||
}
|
}
|
||||||
|
} else if "libvirtd" in [tags] {
|
||||||
|
grok {
|
||||||
|
# libvirtd grok filter adapted from
|
||||||
|
# https://github.com/OpenStratus/openstack-logstash/blob/master/agent.conf
|
||||||
|
match => { "message" => "%{TIMESTAMP_ISO8601:logdate}:%{SPACE}%{NUMBER:pid}:%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}:%{SPACE}%{GREEDYDATA:logmessage}" }
|
||||||
|
add_field => { "received_at" => "%{@timestamp}" }
|
||||||
|
}
|
||||||
} else if "syslog" in [tags] {
|
} else if "syslog" in [tags] {
|
||||||
grok {
|
grok {
|
||||||
# Syslog grok filter adapted from
|
# Syslog grok filter adapted from
|
||||||
|
Loading…
x
Reference in New Issue
Block a user