search

freedomofpress / ansible-role-elk

Installs a turnkey ELK stack for log aggregation and analysis, with optional Riemann support for alerting
18 stars 13 forks source link

Correct timestamps for Logstash events #33

Closed ageis closed 8 years ago

ageis commented 8 years ago

Related issue: https://github.com/freedomofpress/ansible-role-elk/issues/21

conorsch commented 8 years ago

Looking good! Pending one final change to the redmine filters to collapse the timestamp fields, this looks good to merge. FWIW I ran the tests against the branch and it showed no problems. All that checked for was config errors in the logstash filters, but it's better than nothing. Once we update a live config we'll track changes and make sure the data is parsing how we want it.

ageis commented 8 years ago

@conorsch yeah, I knew it would be really involved and take a long time for you to individually test all these filters, so I don't expect you to do that. I tested 'em, but down to go live and see if anything breaks. We've been heavily refining the whole ELK setup as we go along anyway.

conorsch commented 8 years ago

@ageis I'm happy with these so far, let's go for it :shipit: