Tag logstash events as frontend or backend

diff --git a/cookbooks/logstash/templates/default/logstash.conf.erb b/cookbooks/logstash/templates/default/logstash.conf.erb
index c036c1f7aab61c23e38b05edcd2198b59df863ad..cd5a7d24ab901095d28cfe3239b57932eb815f41 100644 (file)
--- a/cookbooks/logstash/templates/default/logstash.conf.erb
+++ b/cookbooks/logstash/templates/default/logstash.conf.erb
@@ -39,6 +39,16 @@ filter {
       ]
     }
   }
       ]
     }
   }

+
+  if [host] =~ /^spike-/ {
+    mutate {
+      add_tag => [ "frontend" ]
+    }
+  } else if [host] =~ /^thorn-/ {
+    mutate {
+      add_tag => [ "backend" ]
+    }
+  }

 }
 
 output {
 }
 
 output {