danielsdeleo

#!/usr/bin/env ruby

recipe_path = ARGV[0]

if recipe_path.nil?
  STDERR.puts "usage: chef-apply RECIPE_FILE"
  exit 1
end

recipe_path = File.expand_path(recipe_path)

juanje

input {
  tcp {
    type => "linux-syslog"
    port => 3333
  }

  file {
    type => "linux-syslog"
    path => [ "/var/log/auth.log" ]
  }

jordansissel

parsing mysql query logs with logstash

The problem is that some lines in the file are missing timestamps when they aren't continuations of any previous line. It's dumb, really.

The mysql query log is seriously bullshit format, but nothing logstash can't unscrew.

The main goal here is to show how we can fix the 'missing timestamp' problem.

% ruby bin/logstash agent -e '