Sha256: 2ea40676c5785b6813db7b362e035ab826b5632d44707ff68142de8f4a315116
Contents?: true
Size: 1.33 KB
Versions: 22
Compression:
Stored size: 1.33 KB
Contents
---
inputs:
all:
- amqp://activemq/topic/logstash-events
linux-syslog:
- /var/log/messages
- /var/log/kern.log
- /var/log/auth.log
- /var/log/user.log
apache-access:
- /var/log/apache2/access.log
apache-error:
- /var/log/apache2/error.log
testing:
- /tmp/logstashtest.log
filters:
- grok:
linux-syslog: # for logs of type 'linux-syslog'
patterns:
- %{SYSLOGLINE}
apache-access: # for logs of type 'apache-error'
patterns:
- %{COMBINEDAPACHELOG}
nagios:
patterns:
- %{NAGIOSLOGLINE}
loggly:
patterns:
- %{JAVASTACKTRACEPART}
testing:
patterns:
- %{JAVASTACKTRACEPART}
- date:
linux-syslog: # for logs of type 'linux-syslog'
# Look for a field 'timestamp' with this format, parse and it for the timestamp
# This field comes from the SYSLOGLINE pattern
timestamp: "%b %e %H:%M:%S"
timestamp8601: ISO8601
apache-access:
timestamp: "%d/%b/%Y:%H:%M:%S %Z"
nagios:
epochtime: %s
- multiline:
supervisorlogs:
pattern: ^\s
what: previous
testing:
pattern: ^\s
what: previous
outputs:
- stdout:///
#- elasticsearch://localhost:9200/logstash/all
- "elasticsearch://localhost:9200/logstash/all_river?method=river&type=rabbitmq&host=activemq&user=guest&pass=guest&vhost=/&queue=es"
Version data entries
22 entries across 22 versions & 1 rubygems