From 5e89113565deddaa444edf80f78afcd230e7d1a4 Mon Sep 17 00:00:00 2001
From: sambufe <samuel.bufe@publicispixelpark.de>
Date: Mon, 20 Nov 2017 11:48:29 +0100
Subject: [PATCH] DNPK-3421 logstash 3

---
 .../mbvd-odt/cms-odt-daimler-com.pixelpark.net.yaml   | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/customer/mbvd-odt/cms-odt-daimler-com.pixelpark.net.yaml b/customer/mbvd-odt/cms-odt-daimler-com.pixelpark.net.yaml
index 56aef98a..0581a046 100644
--- a/customer/mbvd-odt/cms-odt-daimler-com.pixelpark.net.yaml
+++ b/customer/mbvd-odt/cms-odt-daimler-com.pixelpark.net.yaml
@@ -52,12 +52,19 @@ logstash::generic_resource:
     order: 10 # Input
     parameters:
       path: '/var/lib/tomcat/catalina/odt-cms/logs/localhost_access_log.*'
-      type: apache-access
+      type: tomcat-access
       tags:
         - "odt-cms"
         - "%{customer}"
         - "%{environment}"
-
+  tomcat_access_filter:
+    condition: 'if [type] == "tomcat-access"'
+    resource: grok
+    order: 40  # Filter
+    parameters:
+      match:
+        - message
+        - '%%{ich-trickse}{COMMONAPACHELOG}'
 
 apache::mod:proxy:
   proxy_via: 'Off'
-- 
2.39.5