From 3ad20ce40a3d373bc080daeefb48fdff7293ffd9 Mon Sep 17 00:00:00 2001 From: pcrews Date: Fri, 1 Aug 2014 13:31:34 -0700 Subject: [PATCH] Altering indexer config to properly match on libvirtd files The tags associated with libvirtd.txt in logstash are libvirtd.txt and libvirt, the index config looked for libvirtd as the current setup does not appear to match - we only have {%logmessage%} for message content now. Setting search tag to 'libvirt'. Change-Id: I27ae3b034581571285f42dab674ed85ff820cb6f Partial-bug: 1350121 --- modules/openstack_project/templates/logstash/indexer.conf.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/openstack_project/templates/logstash/indexer.conf.erb b/modules/openstack_project/templates/logstash/indexer.conf.erb index 44145ad811..4c4ae666c3 100644 --- a/modules/openstack_project/templates/logstash/indexer.conf.erb +++ b/modules/openstack_project/templates/logstash/indexer.conf.erb @@ -77,7 +77,7 @@ filter { match => { "message" => "\[(?%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{YEAR}%{SPACE}%{TZ}?)\]%{SPACE}\[%{LOGLEVEL:loglevel}\]%{SPACE}%{GREEDYDATA:logmessage}" } add_field => { "received_at" => "%{@timestamp}" } } - } else if "libvirtd" in [tags] { + } else if "libvirt" in [tags] { grok { # libvirtd grok filter adapted from # https://github.com/OpenStratus/openstack-logstash/blob/master/agent.conf