add logstash alert field [stack_trace]

main
ycz008 2024-03-01 17:01:40 +08:00
parent 15c34ecdc1
commit 2a1649add7
1 changed files with 3 additions and 0 deletions

View File

@ -47,6 +47,9 @@ data:
if [message] =~ "Servlet.service" {
drop {}
}
if [message] =~ "no data hit with the given appCode" {
drop {}
}
mutate {
split => { "[log][file][path]" => "/" }
add_field => { "env" => "%{[log][file][path][3]}" }