From 2a1649add77712246e27a1e67e460d7447f2e02a Mon Sep 17 00:00:00 2001
From: ycz008 <yangchengzi@seethingx.com>
Date: Fri, 1 Mar 2024 17:01:40 +0800
Subject: [PATCH] add logstash alert field [stack_trace]

---
 dev-upgrade/elastic/logstash-alert.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/dev-upgrade/elastic/logstash-alert.yaml b/dev-upgrade/elastic/logstash-alert.yaml
index 7447412..4be9e7c 100644
--- a/dev-upgrade/elastic/logstash-alert.yaml
+++ b/dev-upgrade/elastic/logstash-alert.yaml
@@ -47,6 +47,9 @@ data:
       if [message] =~ "Servlet.service" {
         drop {}  
       }
+      if [message] =~ "no data hit with the given appCode" {
+        drop {}  
+      }
       mutate {
         split => { "[log][file][path]" => "/" }
         add_field => { "env" => "%{[log][file][path][3]}" }