|
@@ -40,33 +40,30 @@
|
|
|
}
|
|
|
],
|
|
|
"filter":[
|
|
|
- {
|
|
|
- "filter":"grok",
|
|
|
- "conditions":{
|
|
|
- "fields":{
|
|
|
- "type":[
|
|
|
- "hst_agent"
|
|
|
+ {
|
|
|
+ "filter":"grok",
|
|
|
+ "conditions":{
|
|
|
+ "fields":{
|
|
|
+ "type":[
|
|
|
+ "hst_agent"
|
|
|
]
|
|
|
- }
|
|
|
- },
|
|
|
- "log4j_format":"",
|
|
|
- "multiline_pattern":"^(%{LOGLEVEL:level}%{SPACE}%{TIMESTAMP_ISO8601:logtime})",
|
|
|
- "message_pattern":"(?m)^%{LOGLEVEL:level}%{SPACE}%{TIMESTAMP_ISO8601:logtime}%{SPACE}%{JAVAFILE:file}%{GREEDYDATA:log_message}}",
|
|
|
- "post_map_values":{
|
|
|
- "logtime":{
|
|
|
+ }
|
|
|
+ },
|
|
|
+ "log4j_format":"",
|
|
|
+ "multiline_pattern":"^(%{CUSTOM_DATESTAMP:logtime})",
|
|
|
+ "message_pattern":"(?m)^%{CUSTOM_DATESTAMP:logtime}%{SPACE}%{LOGLEVEL:level}%{SPACE}\\[%{DATA:thread_name}\\]%{SPACE}%{JAVAFILE:file}:%{INT:line_number}%{SPACE}-%{SPACE}%{GREEDYDATA:log_message}",
|
|
|
+ "post_map_values":{
|
|
|
+ "logtime":{
|
|
|
"map_date":{
|
|
|
- "date_pattern":"yyyy-MM-dd HH:mm:ss,SSS"
|
|
|
+ "date_pattern":"dd MMM yyyy HH:mm:ss"
|
|
|
}
|
|
|
-
|
|
|
},
|
|
|
"level":{
|
|
|
- "map_fieldvalue":{
|
|
|
- "pre_value":"WARNING",
|
|
|
- "post_value":"WARN"
|
|
|
- }
|
|
|
-
|
|
|
+ "map_fieldvalue":{
|
|
|
+ "pre_value":"WARNING",
|
|
|
+ "post_value":"WARN"
|
|
|
+ }
|
|
|
}
|
|
|
-
|
|
|
}
|
|
|
},
|
|
|
{
|