The parsing here does a nice job on the "tags" and "gauge" parts of the messages, at least as far as feeding them into New Relic is concerned. This provides log data that should be easy to set up alerting on based on CPU, memory, and disk usage.
The names I used for some of the keys would be worth a review!
The parser expressions and lua filters are probably a bit fragile at this stage.
Here's a screenshot of part of what NR gets, restricted to records where gauge.name was populated.
The parsing here does a nice job on the "tags" and "gauge" parts of the messages, at least as far as feeding them into New Relic is concerned. This provides log data that should be easy to set up alerting on based on CPU, memory, and disk usage.
The names I used for some of the keys would be worth a review!
The parser expressions and lua filters are probably a bit fragile at this stage.
Here's a screenshot of part of what NR gets, restricted to records where gauge.name was populated.