logstash-plugins / logstash-patterns-core

Apache License 2.0
2.17k stars 979 forks source link

Feat: ecs-ize MongoDB pattern captures #269

Closed kares closed 4 years ago

kares commented 4 years ago

MONGO3_LOG is straight forward, the (legacy) MONGO_SLOWQUERY could use some :eyes:

DRAFT since this will need specs for the new ECS names.

HINT: target is ecs-wip branch as this should get a final review when all patterns are migrated

kares commented 4 years ago

have checked recent (3.6.8) MongoDB for potential adjustments needed to MONGO_SLOWQUERY but the slow-query log is no longer a separate thing (slow-queries are logged in the main log and also the details are not ordered) - thus no sense to consider adjusting parts for recent versions. note that the generic MONGO3_LOG works as expected.