7,164
edits
Logstash cheat sheet: Difference between revisions
→splunk のデモをみて、自分の環境に logstash を入れてみた。 :)
| Line 45: | Line 45: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
:こんな感じの template でいいのかねぇ | :こんな感じの template でいいのかねぇ | ||
それか無視するか | |||
<syntaxhighlight lang="javascript" enclose="div"> | |||
# For Beat and LSF compatibility | |||
if [beat][hostname] { | |||
# Remove host metadata | |||
mutate { | |||
remove_field => [ "[host][name]" ] | |||
remove_field => [ "[host][id]" ] | |||
remove_field => [ "[host][architecture]" ] | |||
remove_field => [ "[host][os][platform]" ] | |||
remove_field => [ "[host][os][version]" ] | |||
remove_field => [ "[host][os][family]" ] | |||
remove_field => [ "[host][ip]" ] | |||
remove_field => [ "[host][os]" ] | |||
remove_field => [ "[host]" ] | |||
} | |||
mutate { | |||
add_field => { | |||
"host" => "[beat][hostname]" | |||
} | |||
} | |||
</syntaxhighlight> | |||
===logstash の書籍=== | ===logstash の書籍=== | ||