From f049eca29583914deed024293978fd5423cdd6ed Mon Sep 17 00:00:00 2001
From: =?utf8?q?Oliver=20B=C3=B6ttcher?= <oliver.boettcher@pixelpark.com>
Date: Mon, 19 Feb 2018 17:08:41 +0100
Subject: [PATCH] ffb-werbung - fix logstash

---
 customer/fbb-werbung/common.yaml | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/customer/fbb-werbung/common.yaml b/customer/fbb-werbung/common.yaml
index 6c87e670..07a2f270 100644
--- a/customer/fbb-werbung/common.yaml
+++ b/customer/fbb-werbung/common.yaml
@@ -8,15 +8,20 @@ accounts::users:
 java::package: java-1.8.0-oraclejdk
 
 infra::profile::logstash::apache::resources:
-  magnolia_log4j:
-    resource: log4j
+  magnolia:
+    resource: file
     order: 10 # Input
     parameters:
-      host: '127.0.0.1'
-      type: log4j
-      tags: 
+      path: '/var/lib/tomcat-instances/magnolia/data/logs/*.log'
+      type: app
+      tags:
         - "%{customer}"
         - "%{tier}"
+    codec:
+      type: multiline
+      what: previous
+      pattern: "^%%{ich-trickse}{TIMESTAMP_ISO8601}"
+      negate: true
 
 xymon::procs:
   postgres:
-- 
2.39.5