From 42e6993f9be6b6d9e01b8c56019cece025d4899c Mon Sep 17 00:00:00 2001 From: Philipp Dallig Date: Mon, 29 Feb 2016 16:54:43 +0100 Subject: [PATCH] Update php filter pattern --- classes/site::profile::logstash::php_fpm.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/classes/site::profile::logstash::php_fpm.yaml b/classes/site::profile::logstash::php_fpm.yaml index 752ef8dd..fcf9f648 100644 --- a/classes/site::profile::logstash::php_fpm.yaml +++ b/classes/site::profile::logstash::php_fpm.yaml @@ -30,7 +30,7 @@ site::profile::logstash::php_fpm::resources: parameters: match: - message - - '\[%%{ich-trickse}{MONTHDAY}-%%{ich-trickse}{MONTH}-%%{ich-trickse}{YEAR} %%{ich-trickse}{TIME}\] %%{ich-trickse}{LOGLEVEL:loglevel}\: %%{ich-trickse}{GREEDYDATA:restmessage}' + - '\[%%{ich-trickse}{MONTHDAY}-%%{ich-trickse}{MONTH}-%%{ich-trickse}{YEAR} %%{ich-trickse}{TIME}%%{ich-trickse}{SPACE}%%{ich-trickse}{GREEDYDATA:timezone}?\] %%{ich-trickse}{LOGLEVEL:loglevel}?[ :]*%%{ich-trickse}{GREEDYDATA:restmessage}' php_fpm_slow_filter: condition: 'if [type] == "php-fpm-slow"' resource: grok -- 2.39.5