Make logstash GREEDYDATA accept newlines.
* modules/openstack_project/templates/logstash/indexer.conf.erb: The mutliline filter can add newlines to the @message field of events. Make the grok filter consume the newlines. Change-Id: I8353a482baf83ec1e728e4852c59c37b5e078e8a Reviewed-on: https://review.openstack.org/29984 Reviewed-by: James E. Blair <corvus@inaugust.com> Approved: Clark Boylan <clark.boylan@gmail.com> Reviewed-by: Clark Boylan <clark.boylan@gmail.com> Tested-by: Jenkins
This commit is contained in:
parent
929f152d49
commit
99635df2e9
@ -27,7 +27,9 @@ filter {
|
|||||||
grok {
|
grok {
|
||||||
type => "jenkins"
|
type => "jenkins"
|
||||||
tags => ["console.html"]
|
tags => ["console.html"]
|
||||||
pattern => [ "^%{DATESTAMP:logdate} \| %{GREEDYDATA:logmessage}" ]
|
# Do multiline matching as the above mutliline filter may add newlines
|
||||||
|
# to the log messages.
|
||||||
|
pattern => [ "(?m)^%{DATESTAMP:logdate} \| %{GREEDYDATA:logmessage}" ]
|
||||||
add_field => [ "received_at", "%{@timestamp}" ]
|
add_field => [ "received_at", "%{@timestamp}" ]
|
||||||
}
|
}
|
||||||
date {
|
date {
|
||||||
|
Loading…
Reference in New Issue
Block a user