Closed mrdavidlaing closed 9 years ago
Related - 3bf496a57dd5c68d7cd453703ade6793cd62a157
When the syslog message gives us additional information about the original message host (via [syslog_sd_params][host]
), treat the syslog_hostname
as the @shipper.host
and the @source.host as [syslog_sd_params][host]
Specifically:
[@shipper][host]
=> %{[syslog_hostname]}
[@source][host]
=> %{[syslog_sd_params][host]}
This PR:
@shipper.host
is always populated with the address of the machine sending the data.logstash.metadata_level
==DEBUG
, adds@ingestor.timestamp
@ingestor.service
@ingestor.job
host
,received_at
,received_from
(since these are captured by@shipper.host
and @ingestor.timestamp`@shipper
,@source
and@ingestor
are objects (rather than strings with periods in them; which is not allowed in ES 2.0)fail/syslog_standard/*
error tagssyslog_hostname
andsyslog_timestamp
fields