mirror of
https://github.com/Telecominfraproject/wlan-toolsmith.git
synced 2025-10-29 18:12:20 +00:00
Add grok pattern to parse Docker logs and remove unnecessary field
Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org>
This commit is contained in:
@@ -697,6 +697,15 @@ releases:
|
|||||||
syslog {
|
syslog {
|
||||||
tags => ["ucentral-syslog"]
|
tags => ["ucentral-syslog"]
|
||||||
port => 5514
|
port => 5514
|
||||||
|
grok_pattern => "(?:<%{POSINT:priority}>%{SYSLOGLINE}|%{MONTH} %{MONTHDAY} %{TIME} %{DATA:docker.container_name}/%{DATA:github.run_number}\[%{INT:undefined_number}\]: %{GREEDYDATA:message})"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
filter {
|
||||||
|
if ([undefined_number]) {
|
||||||
|
mutate {
|
||||||
|
remove_field => [ "undefined_number" ]
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user