grok filter hinzugefügt

diff --git a/customer/docmorris/prd-app02-fact.pixelpark.net.yaml b/customer/docmorris/prd-app02-fact.pixelpark.net.yaml
index eb0ea244b608b11dc26a2ff1b039fe17edd1f010..1e6e108c96f2cc66f1b1717e792c5d8199fd711f 100644 (file)
--- a/customer/docmorris/prd-app02-fact.pixelpark.net.yaml
+++ b/customer/docmorris/prd-app02-fact.pixelpark.net.yaml
@@ -8,6 +8,7 @@ accounts::users:
     apply: true
     sudo: true
 
+logstash::drop_grokparsefailure: false
 logstash::generic_resource:
   docmorris_factfinder01:
     resource: file
@@ -29,3 +30,11 @@ logstash::generic_resource:
         - "docmorris-ff7"
         - "%{customer}"
         - "%{environment}"
+  ff_filter:
+    resource: grok
+    order: 40
+    condition: "if [type] == 'tomcat'"
+    parameters:
+      match:
+       - "message"
+       - '%{IP:ip}%{SPACE}\[%{HTTPDATE:logdate}%{DATA}"%{DATA:request}"%{DATA}%{NUMBER:status}%{DATA}%{NUMBER:length} %{DATA}%{NUMBER:time}'
\ No newline at end of file