Issues adding additional fields

[mlamutt]

Hi, I am trying to add additional fields to the stream, so we can provide consistent searching in kibana. I tried adding the fields like this:

def data= emeta + [
            line:context.count,
            datetime:event.datetime.time,
            loglevel:event.loglevel.toString(),
            message:event.message,
            eventType:event.eventType,
        environment:"production",
        dataCenter:"DC1",
        logCategory:"devops",
        application:"rundeck",
        logType:"rundeck",
        host:"rundeckdc101",
            fqdn:"rundeckdc101.mgmt.local",
        ]

This sent the new fields to ELK sporadically (it looks like it was based on the event type). What do I need to do change to get these fields sent every time?

I am running 2 instance of rundeck (one linux and one windows), both are running 2.10.1

Any help would be appreciated. thanks

[ltamaster]

Worked for me. I had to refresh the index on ELK.

Did you add it also to the "close" closures?