Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Filebeat - Modules Apache - Error : Fix Client IP - missing PORT #12695

Merged
merged 11 commits into from
Jul 1, 2019
Merged

Filebeat - Modules Apache - Error : Fix Client IP - missing PORT #12695

Changes from 2 commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
4b0e27d
Fix Client IP - missing PORT
wixaw Jun 26, 2019
7140efc
Update pipeline.json
wixaw Jun 26, 2019
7831d13
Update test.log
wixaw Jun 27, 2019
51d0d86
Update filebeat/module/apache/error/ingest/pipeline.json
wixaw Jun 27, 2019
765cfbb
Update filebeat/module/apache/error/ingest/pipeline.json
wixaw Jun 27, 2019
c26aa92
Update filebeat/module/apache/error/ingest/pipeline.json
wixaw Jun 27, 2019
0a2ad57
Update filebeat/module/apache/error/ingest/pipeline.json
wixaw Jun 27, 2019
06e2395
Update test.log-expected.json
wixaw Jun 27, 2019
9b7182e
Apache module : error log Get IP:PORT
wixaw Jun 29, 2019
c0d1612
Update CHANGELOG.next.asciidoc
wixaw Jun 29, 2019
ff8a152
Rephrase and move changelog entry
jsoriano Jun 29, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions filebeat/module/apache/error/ingest/pipeline.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@
"grok": {
"field": "message",
"patterns": [
"\\[%{APACHE_TIME:apache.error.timestamp}\\] \\[%{LOGLEVEL:log.level}\\]( \\[client %{IPORHOST:source.address}\\])? %{GREEDYDATA:message}",
"\\[%{APACHE_TIME:apache.error.timestamp}\\] \\[%{DATA:apache.error.module}:%{LOGLEVEL:log.level}\\] \\[pid %{NUMBER:process.pid:long}(:tid %{NUMBER:process.thread.id:long})?\\]( \\[client %{IPORHOST:source.address}\\])? %{GREEDYDATA:message}"
"\\[%{APACHE_TIME:apache.error.timestamp}\\] \\[%{LOGLEVEL:log.level}\\]( \\[client %{IPORHOST:source.address}(:%{PORT})?\\])? %{GREEDYDATA:message}",
wixaw marked this conversation as resolved.
Show resolved Hide resolved
"\\[%{APACHE_TIME:apache.error.timestamp}\\] \\[%{DATA:apache.error.module}:%{LOGLEVEL:log.level}\\] \\[pid %{NUMBER:process.pid:long}(:tid %{NUMBER:process.thread.id:long})?\\]( \\[client %{IPORHOST:source.address}(:%{PORT})?\\])? %{GREEDYDATA:message}"
wixaw marked this conversation as resolved.
Show resolved Hide resolved
],
"pattern_definitions": {
"APACHE_TIME": "%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{YEAR}"
Expand Down