From 85fe9aab2a52542caf1c9479ee627b25a5762a28 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 28 Jul 2015 18:58:27 +0100 Subject: [PATCH 1/1] Tag logstash events as frontend or backend --- cookbooks/logstash/templates/default/logstash.conf.erb | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/cookbooks/logstash/templates/default/logstash.conf.erb b/cookbooks/logstash/templates/default/logstash.conf.erb index c036c1f7a..cd5a7d24a 100644 --- a/cookbooks/logstash/templates/default/logstash.conf.erb +++ b/cookbooks/logstash/templates/default/logstash.conf.erb @@ -39,6 +39,16 @@ filter { ] } } + + if [host] =~ /^spike-/ { + mutate { + add_tag => [ "frontend" ] + } + } else if [host] =~ /^thorn-/ { + mutate { + add_tag => [ "backend" ] + } + } } output { -- 2.43.2