lumberjack.dream

# ------------------------------------------------------------------------------
# Cluster config
# ------------------------------------------------------------------------------

default_network: {
    name: "default"
    servers: ["localhost:9991"]
    ssl_ca: "/etc/pki/logstash/lumberjack_development.crt"
    timeout: 180
}

tms_network: {
    name: "tms"
    servers: [
        "tmslogdb01.ny5.etsy.com:9991"
        "tmslogdb02.ny5.etsy.com:9991"
    ]
    ssl_ca: "/etc/pki/logstash/lumberjack_tms.crt"
    timeout: 180
}

prod_network: {
    name: "production"
    servers: [
        "logstash01.ny4dev.etsy.com:9991"
        "logstash02.ny4dev.etsy.com:9991"
    ]
    ssl_ca: "/etc/pki/logstash/lumberjack_production.crt"
    timeout: 180
}

dev_network: {
    name: "development"
    servers: ["localhost:9991"]
    ssl_ca: "/etc/pki/logstash/lumberjack_development.crt"
    timeout: 180
}

network: [default_network tms_network prod_network dev_network]

# ------------------------------------------------------------------------------
# Files to be shipped
# ------------------------------------------------------------------------------

files: [
     {
         paths: ["/var/log/gearman/php.log"]
         fields: {type: "gearman_php_log"}
     }
     {
         paths: ["/var/log/gearman/info.log"]
         fields: {type: "gearman_info_log"}
     }
     {
         paths: ["/var/log/gearman/gearman_worker.log"]
         fields: {type: "gearman_worker_log"}
     }
     {
         paths: ["/var/log/httpd/access_log"]
         fields: {
             tags: "apache_access,apache_strftime"
             type: "web_access_log"
         }
     }
     {
         paths: ["/var/log/httpd/error_log"]
         fields: {
             tags: "apache_error,apache_info_strftime"
             type: "web_error_log"
         }
     }
     {
         paths: ["/var/log/httpd/info.log"]
         fields: {
             tags: "apache_info,apache_info_strftime"
             type: "web_info_log"
         }
     }
     {
         dest: prod_network.name
         paths: ["/var/log/secure"]
         fields: {type: "linux_secure_log"}
     }
     {
         dest: tms_network.name
         fields: {type: "cmdaudit_log"}
         paths: ["/var/log/audit/auditd_json.log.*[0-9]"]
     }
]