diff --git a/docker-compose/elk/logstash/conf.d/23-parse-maria-db.conf b/docker-compose/elk/logstash/conf.d/23-parse-maria-db.conf deleted file mode 100644 index 0a23fddd078e5e967bc5f791e020faaa20ed632a..0000000000000000000000000000000000000000 --- a/docker-compose/elk/logstash/conf.d/23-parse-maria-db.conf +++ /dev/null @@ -1,32 +0,0 @@ -filter { - # mark all our mariadb instances - grok { - match => { - "program" => [ "archiver-maria-db", "tangodb" ] - } - add_tag => [ "mariadb" ] - } - - # parse mariadb output - if "mariadb" in [tags] { - grok { - match => { - "message" => [ - "%{TIMESTAMP_ISO8601:timestamp} .%{WORD:level}. %{GREEDYDATA:message}", - "%{TIMESTAMP_ISO8601:timestamp} 0 .%{WORD:level}. %{GREEDYDATA:message}" - ] - } - "overwrite" => [ "timestamp", "level", "message" ] - } - mutate { - gsub => [ - "level", "Note", "Info" - ] - uppercase => [ "level" ] - } - date { - match => [ "timestamp", "YYYY-MM-dd HH:mm:ssZZ", "YYYY-MM-dd HH:mm:ss", "YYYY-MM-dd H:mm:ss" ] - timezone => "UTC" - } - } -}