From: samuel.bufe <samuel.bufe@publicispixelpark.de>
Date: Mon, 29 Feb 2016 10:38:49 +0000 (+0100)
Subject: grok filter hinzugefügt
X-Git-Tag: v0.1.0~5284^2~4
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=3778903fb7c39772beed4be2993b70fa4f348de6;p=pixelpark%2Fhiera.git

grok filter hinzugefügt
---

diff --git a/customer/docmorris/prd-app02-fact.pixelpark.net.yaml b/customer/docmorris/prd-app02-fact.pixelpark.net.yaml
index eb0ea244..1e6e108c 100644
--- a/customer/docmorris/prd-app02-fact.pixelpark.net.yaml
+++ b/customer/docmorris/prd-app02-fact.pixelpark.net.yaml
@@ -8,6 +8,7 @@ accounts::users:
     apply: true
     sudo: true
 
+logstash::drop_grokparsefailure: false
 logstash::generic_resource:
   docmorris_factfinder01:
     resource: file
@@ -29,3 +30,11 @@ logstash::generic_resource:
         - "docmorris-ff7"
         - "%{customer}"
         - "%{environment}"
+  ff_filter:
+    resource: grok
+    order: 40
+    condition: "if [type] == 'tomcat'"
+    parameters:
+      match:
+       - "message"
+       - '%{IP:ip}%{SPACE}\[%{HTTPDATE:logdate}%{DATA}"%{DATA:request}"%{DATA}%{NUMBER:status}%{DATA}%{NUMBER:length} %{DATA}%{NUMBER:time}'
\ No newline at end of file