Skip to content

Commit

Permalink
Fixed AWS app improper file field nesting
Browse files Browse the repository at this point in the history
  • Loading branch information
brian-grabau committed Aug 21, 2024
1 parent 224dbd4 commit 38ec2ad
Showing 1 changed file with 10 additions and 8 deletions.
18 changes: 10 additions & 8 deletions config/processors/api_aws_app.conf
Original file line number Diff line number Diff line change
Expand Up @@ -20,10 +20,10 @@ filter {
"[log][source][hostname]" => "aws_app"
}
}
# cmd
# cmd
# "[tmp][__monotonic_timestamp]" => "1289776813424"
# "[tmp][__realtime_timestamp]" => "1704485287095345"
# "[tmp][_source_monotonic_timestamp]" => "1989560529012"
# "[tmp][_source_monotonic_timestamp]" => "1989560529012"
# "[tmp][_cap_effective]" => "1ffffffffff"
mutate {
rename => {
Expand All @@ -35,7 +35,7 @@ filter {
"[tmp][code_file]" => "[process][parent][name]"
"[tmp][service]" => "[service][name]"
"[tmp][_gid]" => "[process][pgid]"
"[tmp][_pid]" => "[process][pid]"
"[tmp][_pid]" => "[process][pid]"
"[tmp][_cmdline]" => "[process][command_line]"
"[tmp][_uid]" => "[file][uid]"
"[tmp][_systemd_cgroup]" => "[group][name]"
Expand Down Expand Up @@ -86,19 +86,21 @@ filter {
"[jtmp][logger_name]" => "[log][logger]"
"[jtmp][thread_name]" => "[process][thread][name]"
"[jtmp][@timestamp]" => "[event][created]"
"[jtmp][file]" => "[file][name]"
"[jtmp][line]" => "[log][origin][file][line]"
"[jtmp][@message]" => "[error][message]"
"[jtmp][dd.trace_id]" => "[trace][id]"
"[jtmp][dd.service]" => "[service][name]"
"[jtmp][dd.span_id]" => "[span][id]"
"[jtmp][file][originalname]" => "[file][name]"
"[jtmp][file][encoding]" => "[file][type]"
"[jtmp][file][mimetype]" => "[file][mime_type]"
"[jtmp][line]" => "[log][origin][file][line]"
}
add_tag => [ "%{[jtmp][dd.env]}" ]
}

} else {
mutate {
rename => {
"[tmp][message]" => "[error][message]"
"[tmp][message]" => "[error][message]"
}
}
}
Expand All @@ -119,7 +121,7 @@ filter {
}

mutate {
remove_field => ["tmp", "jtmp" ]
remove_field => ["tmp", "jtmp" ]
}
}
output {
Expand Down

0 comments on commit 38ec2ad

Please sign in to comment.