Skip to content

Instantly share code, notes, and snippets.

@Tombar
Created November 12, 2013 19:11
Show Gist options
  • Save Tombar/7436887 to your computer and use it in GitHub Desktop.
Save Tombar/7436887 to your computer and use it in GitHub Desktop.
chef logstash filter for nginx json logs
node.override['logstash']['server'].filters = [
{ "json" => {
"source" => "message"
}
},
{ "date" => {
"match" => [ "time_local", "dd/MMM/YYYY:HH:mm:ss +0000", "dd/MMM/YYYY:HH:mm:ss"],
"remove_field" => "time_local"
}
},
{ "useragent" => {
"source" => "http_user_agent",
"target" => "ua"
}
},
{
"geoip" => {
"source" => "remote_addr"
}
},
{
"grok" => {
"match" => [ "request", "%{WORD:request_method} %{URIPATH:request_uri}(?:%{URIPARAM:request_querystring})?" ]
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment