Skip to content
Snippets Groups Projects
Commit 43f469ef authored by Stefano Di Frischia's avatar Stefano Di Frischia
Browse files

L2SS-541: delete mariadb entry from elk

parent a1d817e6
No related branches found
No related tags found
1 merge request!258Resolve L2SS-541-remove-mysql-archiver
filter {
# mark all our mariadb instances
grok {
match => {
"program" => [ "archiver-maria-db", "tangodb" ]
}
add_tag => [ "mariadb" ]
}
# parse mariadb output
if "mariadb" in [tags] {
grok {
match => {
"message" => [
"%{TIMESTAMP_ISO8601:timestamp} .%{WORD:level}. %{GREEDYDATA:message}",
"%{TIMESTAMP_ISO8601:timestamp} 0 .%{WORD:level}. %{GREEDYDATA:message}"
]
}
"overwrite" => [ "timestamp", "level", "message" ]
}
mutate {
gsub => [
"level", "Note", "Info"
]
uppercase => [ "level" ]
}
date {
match => [ "timestamp", "YYYY-MM-dd HH:mm:ssZZ", "YYYY-MM-dd HH:mm:ss", "YYYY-MM-dd H:mm:ss" ]
timezone => "UTC"
}
}
}
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment