Handle request IDs with hyphens
authorTom Hughes <tom@compton.nu>
Mon, 27 Jul 2015 17:55:41 +0000 (18:55 +0100)
committerTom Hughes <tom@compton.nu>
Mon, 27 Jul 2015 17:55:58 +0000 (18:55 +0100)
cookbooks/logstash/templates/default/logstash.conf.erb

index e4546bb013b98e87923b06ac3807e94d942d5791..7608e2b5b2555fd63a574cd5d0827c4ef56425f3 100644 (file)
@@ -9,7 +9,7 @@ input {
 filter {
   if [type] == "apache" {
     grok {
 filter {
   if [type] == "apache" {
     grok {
-      match => [ "message", "%{COMBINEDAPACHELOG} %{NUMBER:duration:int}us %{WORD:request_id} %{NOTSPACE:ssl_protocol} %{NOTSPACE:ssl_cipher}" ]
+      match => [ "message", "%{COMBINEDAPACHELOG} %{NUMBER:duration:int}us %{NOTSPACE:request_id} %{NOTSPACE:ssl_protocol} %{NOTSPACE:ssl_cipher}" ]
     }
     date {
       match => [ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z" ]
     }
     date {
       match => [ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z" ]