Drop oslofmt tag from checks

The filebeat does not ship anything tagged with oslofmt, the
openstack tag gives us all we need to parse things correctly.

Change-Id: I614e4bc5d85559540a9d616407da993ed90de87e
This commit is contained in:
Mohammed Naser 2018-09-23 16:48:11 -04:00
parent 48d7b08773
commit eb4e6731b5

View File

@ -173,7 +173,6 @@
}
}
} else if "openstack" in [tags] {
if "oslofmt" in [tags] {
if "Can not find policy directory: policy.d" in [message] {
drop { }
}
@ -186,7 +185,6 @@
}
add_field => { "received_at" => "%{@timestamp}" }
}
}
if "nova" in [tags] {
mutate {
gsub => ["logmessage","\"",""]