From 13ec55c86cc0668fb2389c08bcdca618b5ebb78a Mon Sep 17 00:00:00 2001 From: Jordan Sissel Date: Sun, 27 Feb 2011 02:08:52 -0800 Subject: [PATCH] - file input, grok and date filters, stdout and elasticsearch outputs. Works again. Good milestone for the jruby migration! --- etc/agent.conf.example | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 etc/agent.conf.example diff --git a/etc/agent.conf.example b/etc/agent.conf.example new file mode 100644 index 000000000..750e6a0b2 --- /dev/null +++ b/etc/agent.conf.example @@ -0,0 +1,30 @@ +input { + file { + path => [ "/var/log/messages", "/var/log/*.log" ] + type => "linux-syslog" + } +} + +filter { + grok { + type => "linux-syslog" + pattern => "%{SYSLOGLINE}" + } + + date { + type => "linux-syslog" + timestamp => "MMM dd HH:mm:ss" + timestamp8601 => ISO8601 + } +} + +output { + stdout { + debug => true + } + + elasticsearch { + index => "logstash" + type => "%{@type}" + } +}