aws-samples / amazon-cloudwatch-container-insights

CloudWatch Agent Dockerfile and K8s YAML templates for CloudWatch Container Insights.
MIT No Attribution
163 stars 107 forks source link

wrong parser for dmesg logs #107

Closed pie-r closed 1 year ago

pie-r commented 1 year ago

The dmesg logs have this format:

[    4.124564] AVX2 version of gcm_enc/dec engaged.
[    4.129423] AES CTR mode by8 optimization enabled
[    4.356031] RPC: Registered named UNIX socket transport module.
[    4.361383] RPC: Registered udp transport module.
[    4.365930] RPC: Registered tcp transport module.
[    4.370478] RPC: Registered tcp NFSv4.1 backchannel transport module.

That is not compliant with the current parser:

[PARSER]
        Name                syslog
        Format              regex
        Regex               ^(?<time>[^ ]* {1,2}[^ ]* [^ ]*) (?<host>[^ ]*) (?<ident>[a-zA-Z0-9_\/\.\-]*)(?:\[(?<pid>[0-9]+)\])?(?:[^\:]*\:)? *(?<message>.*)$
        Time_Key            time
        Time_Format         %b %d %H:%M:%S
pie-r commented 1 year ago

This issue is related: #30