Closed Bug 747177 Opened 13 years ago Closed 13 years ago

logstash-metlog has no way of addressing some parts of an event when writing to text files

Categories

(Cloud Services :: Server: Other, defect)

Product:
Cloud Services
Component:
Server: Other
Platform:
Other
Other
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: vng, Assigned: vng)

Details

(Whiteboard: [qa+])

The logstash-metlog extensions have an output plugin called "metlog_file.rb". This output plugin allows you to specify a format type of : "preformatted_text" which basically amounts to "Just write some part of my JSON structure to disk". Logstash internally keeps track of each message in an object called "event" which is basically a dictionary of key/value pairs. The 'address' of the structure is stored in a key called "formatted_field" which currently only lets you address a single level down into event['fields'][formatted_field]. This causes problems because the metlog library will frequently only populate event['payload'] with useful information. The formatted_field key should be modified to be similar to the logstash.filters.tagger filter where a pattern can be used to address an arbitrary part of the JSON blob (including the top level 'payload' key)
Assignee: nobody → vng
Whiteboard: [qa+]
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.