search

logstash-plugins / logstash-patterns-core

Apache License 2.0
2.17k stars 980 forks source link

Fix: parsing x-edge-location in CLOUDFRONT_ACCESS_LOG #311

Closed kares closed 2 years ago

kares commented 2 years ago

NOTE: only fixed in ECS mode, legacy mode continues to use WORD.

Using WORD seem to have worked historically but most edge-locations these days won't match!

AWS CloudFront CDN Edge Locations have a fixed format: https://www.feitsui.com/en/article/3 Thus introduced the CLOUDFRONT_EDGE_LOCATION pattern, it's still technically a bug fix.