openstack/openstack-ansible-ops
Code Issues Proposed changes

Strip underscores from journalbeat fields

Browse Source 
Elasticsearch does not index fields starting with underscore,
they are reserved for internal use.

Change-Id: I3575f6ba0628c5ff4125910e34185a4d1526aeb9
This commit is contained in:
Jonathan Rosser 2018-05-21 09:58:34 +01:00
parent f856f3bfaf
commit 46412a62de
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
elk_metrics_6x/templates/journalbeat.yml.j2
View File

@ -37,7 +37,7 @@ journalbeat:
# Lowercase and remove leading underscores, e.g. "_MESSAGE" -> "message"
# (defaults to false)
#clean_field_names: false
clean_field_names: true
# All journal entries are strings by default. You can try to convert them to numbers.
# (defaults to false)