Spencer Owen spuder

I have ssh connections from multiple users. I want to log all connectsion except those from the user 'git'. How dow you create an exception to a filter ?

input {

  file {
     path => "/var/log/auth.log"
     type => "syslog"
  }
}

cat /etc/logstash/conf.d/logstash.conf

input {
file {
  path => ['/tmp/foo']
}
}
output {
file {
 path =&gt; ['/tmp/bar']

http://stackoverflow.com/questions/23965583/ruby-crashes-when-starting-application-is-it-the-environment

I tried installing dashing again this time with the following configuration

linux (cent 6.4)
RVM
ruby 2.1.1

ruby --version

	# The case statment is running too late, it needs to run earlier

	case $::osfamily {
	redhat:{
	$redis_6390_version = 'redis-6390-2.8.7-1.x86_64.rpm'
	notify {"Installing redhat redis from /tmp/${redis_6390_vesion}":}

	}
	debian:{
	$redis_6390_version = 'redis-6390_2.8.7_amd64.deb'

	# How would one guarantee that 'fpm' is installed after 'ruby-devel' ?


	$required_packages=['rubygems','ruby-devel', 'gcc', 'gcc-c++', 'rpm-build']

	ensure_packages($required_packages)

	package { 'fpm' :
	ensure => latest,
	provider => gem,

	# MANAGED VIA GIT https://gist.github.com/spuder/11360474
	# CHANGES MAY BE OVERWRITTEN

	# Import the bash_ps1, adds dotted lines after every command
	if [ -f "$HOME/.bash_ps1" ]; then
	. "$HOME/.bash_ps1"
	fi


	export CLICOLOR=1

	#!/bin/bash

	#Usage: Execute the following command:

	<<COMMENT1

	curl -L https://gist.github.com/spuder/11360474/raw/ \| bash -x

	COMMENT1

	#This config does not work, it never enters the if [tag] == derp block

	input {
	stdin {}
	}
	filter {
	grok {
	#match => [ "message", ".*" ]
	match => [ "message", "%{GREEDYDATA}" ]
	add_tag => [ "derp" ]

	node "logstash.foobar.com" {

	class { 'ac_logstash_server':}

	class { 'elasticsearch':
	manage_repo => true,
	repo_version => '1.0',
	}

	class { 'logstash':

	http://www.puppetcookbook.com/posts/creating-a-directory-tree.html
	I"m trying to create a whole bunch of symbolic ilnks at once. They all point to the same script (it is overloaded)

	$native_links = [
	'query.workload',
	'query.resource',
	'job.start',
	'job.modify',
	'job.cancel',
	'job.suspend',