NAME
eris::schema::syslog - Schema for the syslog data
VERSION
version 0.008
SYNOPSIS
Simple syslog schema. Matches all logs and will index them into the index_name specified or syslog-%Y.%m.%d
if not provided.
If you'd like to enable the debugging dictionary on this schema, add the following to your config.yaml
.
---
schemas:
config:
syslog:
dictionaries:
config:
eris::debug: { enabled: 1 }
This will index the fields contained in the eris::dictionary::eris::debug dictionary.
PROPERTIES
- final
-
True (default)
- flatten
-
True (default)
- priority
-
100 - Try hard to be last
- use_dictionary
-
True - Prunes unknown fields (default)
- dictionary
-
See eris::dictionary for the default configuration
- match_log
-
Matches everything
SEE ALSO
AUTHOR
Brad Lhotsky <brad@divisionbyzero.net>
COPYRIGHT AND LICENSE
This software is Copyright (c) 2015 by Brad Lhotsky.
This is free software, licensed under:
The (three-clause) BSD License