BryanDavis has uploaded a new change for review.
https://gerrit.wikimedia.org/r/179759
Change subject: logstash: parse json encoded hhvm fatal errors
......................................................................
logstash: parse json encoded hhvm fatal errors
Change-Id: I8f8385af87696a2c479665c35075cfedea242dfb
---
M files/logstash/filter-syslog.conf
1 file changed, 10 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/59/179759/1
diff --git a/files/logstash/filter-syslog.conf
b/files/logstash/filter-syslog.conf
index 49df1f4..260b341 100644
--- a/files/logstash/filter-syslog.conf
+++ b/files/logstash/filter-syslog.conf
@@ -35,11 +35,20 @@
}
}
- # Strip leading newline from hhvm messages
if [type] == "hhvm" {
+ # Strip leading newline from hhvm messages
mutate {
strip => [ "message" ]
}
+
+ if [message] =~ /^{.*}$/ {
+ # Parse json encoded fatal errors
+ json {
+ source => "message"
+ add_tag => [ "json" ]
+ add_field => [ "channel", "fatal" ]
+ }
+ }
}
if [type] == "hhvm-fatal" {
--
To view, visit https://gerrit.wikimedia.org/r/179759
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I8f8385af87696a2c479665c35075cfedea242dfb
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BryanDavis <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
