Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- CFTIME "%{DATE_US:date}","%{TIME:time}"
- CFUSION %{QS:severity},%{QS:threadid},%{CFTIME},%{QS:application}?,%{QS:message}
- grok {
- type => "cfusion"
- patterns_dir => "/etc/logstash/patterns"
- pattern => "%{CFUSION}"
- add_field => [ "timestamp","%{date} %{time}" ]
- }
- date {
- type => "cfusion"
- timestamp => "MM/dd/yy HH:mm:ss"
- }
Add Comment
Please, Sign In to add comment