Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- grok {
- patterns_dir => "patterns"
- match => [
- "message", "%{SYSLOGBASE} %{POSTFIXCLEANUP}",
- "message", "%{SYSLOGBASE} %{POSTFIXBOUNCE}"
- ]
- named_captures_only => true
- }
- if "_grokparsefailure" not in [tags] {
- #database call
- }
- grok {
- patterns_dir => "patterns"
- match => [
- "message", "%{SYSLOGBASE} %{POSTFIXBOUNCE}"
- ]
- add_tag => ["BOUNCED"]
- remove_tag => ["_grokparsefailure"]
- named_captures_only => true
- }
- grok {
- patterns_dir => "patterns"
- match => [
- "message", "%{SYSLOGBASE} %{POSTFIXCLEANUP}"
- ]
- add_tag => ["INTIALIZATION"]
- remove_tag => ["_grokparsefailure"]
- named_captures_only => true
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement