Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Infra UI] Improve built-in log reconstruction rules for development and demos #22213

Conversation

weltenwort
Copy link
Member

@weltenwort weltenwort commented Aug 21, 2018

This splits the built-in rules for log message reconstruction into separate files for filebeat modules. It also adds a few basic rules for:

  • apache2 access logs
  • nginx access logs
  • redis logs
  • system.auth.ssh events

image

I've represented the spaces as separate constants in some rules to anticipate the addition of a "role" property (e.g. "log facility") to each log message segment. Once those are added, segments can be treated according to their role in the UI.

@weltenwort weltenwort added review :Ingest UI Feature:Metrics UI Metrics UI feature loe:small Small Level of Effort labels Aug 21, 2018
@weltenwort weltenwort self-assigned this Aug 21, 2018
@weltenwort weltenwort requested a review from skh August 21, 2018 13:24
@elasticmachine
Copy link
Contributor

💔 Build Failed

@weltenwort weltenwort force-pushed the infra-ui-enhancement-add-more-rules branch from e713571 to f320592 Compare August 22, 2018 15:35
@elasticmachine
Copy link
Contributor

💔 Build Failed

Copy link
Contributor

@skh skh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works as described and I couldn't break it, so 👍 from me.

@weltenwort weltenwort merged commit 52193ce into elastic:feature-infra-ui Aug 23, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature:Metrics UI Metrics UI feature loe:small Small Level of Effort review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants