logstash/etc/tograylog.yaml
2010-11-17 20:31:16 +00:00

37 lines
926 B
YAML

---
inputs:
linux-syslog:
- /var/log/messages
- /var/log/kern.log
- /var/log/auth.log
- /var/log/user.log
apache-access:
- /var/log/apache2/access.log
- /home/jls/logs/access_log
apache-error:
- /var/log/apache2/error.log
- /home/jls/logs/error_log
filters:
- grok:
linux-syslog: # for logs of type 'linux-syslog'
patterns:
- %{SYSLOGLINE}
apache-access: # for logs of type 'apache-error'
patterns:
- %{COMBINEDAPACHELOG}
nagios:
patterns:
- %{NAGIOSLOGLINE}
- date:
linux-syslog: # for logs of type 'linux-syslog'
# Look for a field 'timestamp' with this format, parse and it for the timestamp
# This field comes from the SYSLOGLINE pattern
timestamp: "%b %e %H:%M:%S"
timestamp8601: ISO8601
apache-access:
timestamp: "%d/%b/%Y:%H:%M:%S %Z"
nagios:
epochtime: %s
outputs:
- stdout:///
- gelf://localhost/