parent
dee5e8b144
commit
8e62ac0cdb
@ -74,6 +74,15 @@
|
|||||||
"type": "lucene",
|
"type": "lucene",
|
||||||
"enable": true,
|
"enable": true,
|
||||||
"query": "tags:heat*"
|
"query": "tags:heat*"
|
||||||
|
},
|
||||||
|
"8": {
|
||||||
|
"id": 7,
|
||||||
|
"color": "#705DA0",
|
||||||
|
"alias": ""
|
||||||
|
"pin": false,
|
||||||
|
"type": "lucene",
|
||||||
|
"enable": true,
|
||||||
|
"query": "tags:horizon*"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
"ids": [
|
"ids": [
|
||||||
@ -84,7 +93,8 @@
|
|||||||
4,
|
4,
|
||||||
5,
|
5,
|
||||||
6,
|
6,
|
||||||
7
|
7,
|
||||||
|
8
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"filter": {
|
"filter": {
|
||||||
|
@ -115,14 +115,34 @@ filter {
|
|||||||
# 1) 192.168.1.100 - - [10/Jun/2014:11:43:14 +0000] "POST http://192.168.1.100:5000/v2.0/tokens HTTP/1.0" 200 8374
|
# 1) 192.168.1.100 - - [10/Jun/2014:11:43:14 +0000] "POST http://192.168.1.100:5000/v2.0/tokens HTTP/1.0" 200 8374
|
||||||
grok {
|
grok {
|
||||||
match => [
|
match => [
|
||||||
"message", "%{COMMONAPACHELOG}"
|
"@message", "%{COMMONAPACHELOG}"
|
||||||
]
|
]
|
||||||
add_tag => [ "generic-apache-request" ]
|
add_field => {
|
||||||
|
"openstack_message" => "%{request} %{response}"
|
||||||
|
"os_level" => "%{verb}"
|
||||||
|
}
|
||||||
|
add_tag => [ "generic-apache-request", "horizon-generic" ]
|
||||||
break_on_match => false
|
break_on_match => false
|
||||||
remove_field => ["message"] # overwrites original message with whats left
|
|
||||||
tag_on_failure => []
|
tag_on_failure => []
|
||||||
}
|
}
|
||||||
|
|
||||||
#-----------------------------------------------------------------------
|
#-----------------------------------------------------------------------
|
||||||
|
# Generic Apache Error
|
||||||
|
# i.e.:
|
||||||
|
# [Tue Oct 14 16:48:47.903895 2014] [ssl:info] [pid 1332:tid 140612212823808] [client 172.29.236.100:43523] AH01964: Connection to child 15 established (server aio1_horizon_container-616911e5:443)
|
||||||
|
grok {
|
||||||
|
match => [
|
||||||
|
"@message", "%{APACHE_ERROR}"
|
||||||
|
]
|
||||||
|
add_field => {
|
||||||
|
"openstack_message" => "%{ERROR_MESSAGE}"
|
||||||
|
"os_level" => "%{SEVERITY}"
|
||||||
|
}
|
||||||
|
add_tag => [ "generic-apache-request", "horizon-generic" ]
|
||||||
|
break_on_match => false
|
||||||
|
tag_on_failure => []
|
||||||
|
}
|
||||||
|
|
||||||
}
|
}
|
||||||
#---------------------------------------------------------------------------
|
#---------------------------------------------------------------------------
|
||||||
}
|
}
|
||||||
|
@ -13,3 +13,13 @@ OPENSTACK_FUNCTION ((?:\w+)\.?)+
|
|||||||
OPENSTACK_CODE (?:\[.*\])
|
OPENSTACK_CODE (?:\[.*\])
|
||||||
|
|
||||||
CONTAINER_STRIP (?:(\w+)(?=_container-\S+))
|
CONTAINER_STRIP (?:(\w+)(?=_container-\S+))
|
||||||
|
|
||||||
|
FOUR_YEAR (?>=d){4}
|
||||||
|
|
||||||
|
ERROR_STAMP %{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{FOUR_YEAR}
|
||||||
|
|
||||||
|
APACHE_PIDTID %{WORD:pid} %{POSINT:APACHE_PID}:%{WORD:tid} %{POSINT:APACHE_TID}
|
||||||
|
|
||||||
|
APACHE_CLIENT %{WORD:client} %{IP}:%{POSINT:PORT}
|
||||||
|
|
||||||
|
APACHE_ERROR \[%{ERROR_STAMP}\] \[%{DATA:MODULE}:%{DATA:SEVERITY}\] \[%{APACHE_PIDTID}\] \[%{APACHE_CLIENT}\] %{GREEDYDATA:ERROR_MESSAGE}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user