Hi!
I have many folders with files as follows :
/var/log/xxx/jack/program.log.1
/var/log/xxx/jack/program.log.2
/var/log/xxx/john/program.log.1
/var/log/xxx/john/program.log.3
/var/log/xxx/sam/program.log.1
...
I would like to pass the "something" field to the decoder , so that the message
fields of the decoder also have access to the "something" fields. Is there a
way for me to do this ?
I post these fields via a REST api (using an elasticsearchoutput) and store
them in a mongo DB. I would like the "something" field also stored.
[SomethingLogInput]
type = "LogstreamerInput"
log_directory = "/var/log/xxx"
file_match = '(?P<something>\s+)/program\.log\.?(?P<Seq>\d*)'
differentiator = ["something", "erlang","Seq"]
decoder = "SomethingLogDecoder"
Thanks!
_______________________________________________
Heka mailing list
[email protected]
https://mail.mozilla.org/listinfo/heka