--- /dev/null
+---
+infra::profile::logstash::mysql::resources:
+ mysql_error:
+ resource: file
+ order: 10 # Input
+ parameters:
+ path:
+ - '/var/log/mariadb/mariadb.log'
+ - '/var/log/mariadb/mysql.log'
+ - '/var/log/mariadb/error.log'
+ - '/var/log/mysql/mysql.log'
+ - '/var/log/mysql/mariadb.log'
+ - '/var/log/mysql/error.log'
+ - '/var/log/mysqld.log'
+ type: mysql-error
+ tags:
+ - "%{customer}"
+ - "%{tier}"
+ codec:
+ type: multiline
+ what: previous
+ negate: true
+ pattern: '%%{ich-trickse}{TIMESTAMP_ISO8601:time} *%%{ich-trickse}{INT:threadid}? *\[%%{ich-trickse}{WORD:loglevel}\] *%%{ich-trickse}{GREEDYDATA:restmessage}'
+ mysql_filter:
+ condition: 'if [type] == "mysql-error"'
+ resource: grok
+ order: 40 # Filter
+ parameters:
+ match:
+ - message
+ - '%%{ich-trickse}{TIMESTAMP_ISO8601:time} *%%{ich-trickse}{INT:threadid}? *\[%%{ich-trickse}{WORD:loglevel}\] *%%{ich-trickse}{GREEDYDATA:restmessage}'
\ No newline at end of file