1a3c4f1bbf
To satisfy the needs of the modern parser plugin. Needed-By: https://review.opendev.org/c/openstack/kolla/+/823071 Co-Authored-By: Dr. Jens Harbott <harbott@osism.tech> Change-Id: I2b748d0544c14bebefe8c62aa5aafaaa5371ce53
18 lines
911 B
Django/Jinja
18 lines
911 B
Django/Jinja
<filter wsgi_access>
|
|
@type parser
|
|
reserve_data true
|
|
format grok
|
|
key_name Payload
|
|
grok_pattern %{IPORHOST:clientip} %{HTTPDUSER:ident} %{USER:auth} \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) %{QS:referrer} %{QS:agent}
|
|
time_key Timestamp
|
|
time_format %d/%b/%Y:%H:%M:%S %z
|
|
keep_time_key true
|
|
<parse>
|
|
@type grok
|
|
grok_pattern %{IPORHOST:clientip} %{HTTPDUSER:ident} %{USER:auth} \[%{HTTPDATE:Timestamp}\] "(?:%{WORD:http_method} %{NOTSPACE:http_url}(?: HTTP/%{NUMBER:http_version})?|%{DATA:rawrequest})" %{NUMBER:http_status} (?:%{NUMBER:http_bytes}|-) (?:%{NUMBER:http_response_time_us}|-) %{QS:referrer} %{QS:agent}
|
|
time_key Timestamp
|
|
time_format %d/%b/%Y:%H:%M:%S %z
|
|
keep_time_key true
|
|
</parse>
|
|
</filter>
|