ycz
/
OKR
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update logstash

main
ycz008 2023-09-27 15:28:22 +08:00
parent fa0231ccbd
commit a884fd5752
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
dev-upgrade/elastic/logstash.yml
View File

@ -16,8 +16,9 @@ data:
source => "message"
}
}
grok {
match => { "log.file.path" => "(?:/[^/]+){2}/(?<env>[^/]+)" }
mutate {
split => { "[log][file][path]" => "/" }
add_field => { "env" => "%{[log][file][path][2]}" }
}
}