chef runtimes => logstash

gistfile1.txt

grok patterns:

CHEF_RUNTIME INFO: Chef Run complete in %{NUMBER:runtime} seconds
HOST_PART \b[A-Za-z][0-9A-Za-z-]{0,62}\b
HOST_FIRSTPART %{HOST_PART:hostname_short}


collector.conf:

filter {
  grok {
    type => "chef_client_logs"   
    add_tag => ["chef_runtime"]
    pattern => "%{CHEF_RUNTIME}"
  }
  grok {
    type => "chef_client_logs"
    match => ["@source_host", "%{HOST_FIRSTPART}"]
  }
}

output {
  graphite {
    tags => ["chef_runtime"]
    host => "graphite-collector.colo.bluestatedigital.com"
    port => 2003
    metrics => ["logstash.chefclient.runtime.%{hostname_short}", "%{runtime}"]
  }
}