Hello,
I can't manage to make heka parse any apache logs.
Here is my configuration:
## apache config
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combined
CustomLog "/var/log/httpd/pulp-http_access.log" combined
## heka config
[apache]
type = "SandboxDecoder"
filename = "lua_decoders/apache_access.lua"
[apache.config]
type = "combined"
user_agent_transform = "true"
log_format='%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"'
## heka decoded message
2015/09/23 11:11:17
:Timestamp: 2015-09-23 08:11:17.004602885 +0000 UTC
:Type: logfile
:Hostname: v-so-repo-05.company.net
:Pid: 0
:Uuid: 3b9f482b-d67c-4d39-b443-a210fb66250c
:Logger: apache.pulp-http_.access
:Payload: 10.220.10.117 - - [14/Sep/2015:23:40:25 +0300] "GET
/repos/ol_latest/6Server/repodata/repomd.xml HTTP/1.1" 200 2142 "-"
"urlgrabber/3.9.1 yum/3.2.29"
:EnvVersion:
:Severity: 7
The payload is the exact same string found in the logs file.
Can someone help with any ideas?
Thank you,
Cristian Falcas
_______________________________________________
Heka mailing list
[email protected]
https://mail.mozilla.org/listinfo/heka
