refs #2407 removes some innecesaries pipelines
parent
8dac8a26cf
commit
bf7dfcd9ce
|
@ -187,29 +187,6 @@
|
|||
}
|
||||
]
|
||||
},
|
||||
"json_parse_with_replacement_debug" : {
|
||||
"description" : "Debug replacement of single quotes with double quotes and parse JSON",
|
||||
"processors" : [
|
||||
{
|
||||
"script" : {
|
||||
"source" : "\n ctx.message = ctx.message.replace(\"'\", \"\\\"\");\n "
|
||||
}
|
||||
},
|
||||
{
|
||||
"set" : {
|
||||
"field" : "debug_message",
|
||||
"value" : "{{ message }}"
|
||||
}
|
||||
},
|
||||
{
|
||||
"json" : {
|
||||
"field" : "message",
|
||||
"target_field" : "parsed_json",
|
||||
"ignore_failure" : true
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"ogrepo_parse_pipeline" : {
|
||||
"description" : "Parse ogRepo logs for detailed JSON information",
|
||||
"processors" : [
|
||||
|
@ -287,37 +264,6 @@
|
|||
}
|
||||
]
|
||||
},
|
||||
"kea_dhcp_filebeat_pipeline" : {
|
||||
"description" : "Parse Kea DHCP logs from Filebeat",
|
||||
"processors" : [
|
||||
{
|
||||
"grok" : {
|
||||
"field" : "message",
|
||||
"patterns" : [
|
||||
"%{TIMESTAMP_ISO8601:timestamp} %{LOGLEVEL:level} \\[%{DATA:service}/%{NUMBER:pid}\\.%{DATA:thread_id}\\] %{DATA:event_type} \\[hwtype=%{NUMBER:hw_type} %{MAC:mac_address}\\](?:, cid=\\[%{DATA:cid}\\])?, tid=%{DATA:transaction_id}: (?:lease %{IP:ip_address} %{GREEDYDATA:event_details})?"
|
||||
],
|
||||
"ignore_failure" : true
|
||||
}
|
||||
},
|
||||
{
|
||||
"set" : {
|
||||
"field" : "service",
|
||||
"value" : "kea-dhcp4",
|
||||
"ignore_failure" : true
|
||||
}
|
||||
},
|
||||
{
|
||||
"date" : {
|
||||
"field" : "timestamp",
|
||||
"formats" : [
|
||||
"yyyy-MM-dd HH:mm:ss.SSS"
|
||||
],
|
||||
"target_field" : "@timestamp",
|
||||
"ignore_failure" : true
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"filter_ogboot_pipeline" : {
|
||||
"description" : "Parse logs to extract http_code and desc, while preserving original message",
|
||||
"processors" : [
|
||||
|
@ -622,17 +568,6 @@
|
|||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"copy-message-pipeline" : {
|
||||
"description" : "Pipeline que copia el campo message a message_raw",
|
||||
"processors" : [
|
||||
{
|
||||
"set" : {
|
||||
"field" : "message_raw",
|
||||
"value" : "{{message}}"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue