Hi,
Here are some suggestions from my experience:
1. Input patterns could be simplified by * matches, e.g.:
file {
path = [ /var/log/remote/*.domain.tld/neutron* ]
exclude = *.gz
}
2. Logs could be parsed by the following pattern:
grok {
patterns_dir = patterns
match = {
Dear All,
I have a openstack HA environment deployed using fuel 5.1. Fuel master node
collects all the node logs under /var/log/docker-logs/remote/ directory.
I have installed Logstash on fuel master node. Here is Logstash.conf:
http://paste.openstack.org/show/190985/
Here is rsyslog Template
