Such facility ids are generated by NetworkManager but the journalbeat
index mapping is expecting a long (7.15.2)
Related to T3705
Details
Details
- Reviewers
ardumont - Group Reviewers
System administrators - Maniphest Tasks
- T3705: Upgrade the ELK stack
- Commits
- rSPSITEae1e994eabc5: logstash: rename syslog facility to facility_name when it's a string
-logstash0:
diff origin/production/logstash0.internal.softwareheritage.org current/logstash0.internal.softwareheritage.org
*******************************************
File[/etc/logstash/conf.d/filter.conf] =>
parameters =>
content =>
@@ -31,4 +31,9 @@
}
} else {
+ if [syslog][facility] !~ /^\d+$/ {
+ mutate {
+ rename => { "[syslog][facility]" => "[syslog][facility_name]" }
+ }
+ }
if [@metadata][version] {
mutate {
*******************************************
*** End octocatalog-diff on logstash0.internal.softwareheritage.orgDiff Detail
Diff Detail
- Repository
- rSPSITE puppet-swh-site
- Branch
- staging
- Lint
No Linters Available - Unit
No Unit Test Coverage - Build Status
Buildable 25100 Build 39216: arc lint + arc unit