Initial commit: add .gitignore and README

This commit is contained in:
defiQUG
2026-02-09 21:51:48 -08:00
commit d4ba3d45e5
174 changed files with 32756 additions and 0 deletions

View File

@@ -0,0 +1,21 @@
filter {
if [service_name] == "quorum" {
grok {
match => { "message" => "%{GREEDYDATA:level}\[%{MONTHNUM:monthnum}\-%{DATA:monthday}\|%{TIME:time}\] %{GREEDYDATA:message}" }
overwrite => [ "message" ]
}
mutate {
add_field => {
"timestamp" => "%{monthnum} %{monthday} %{time}"
}
}
date {
match => [ "timestamp" , "MM dd HH:mm:ss.SSS", "MM dd HH:mm:ss.SSS", "ISO8601"]
remove_field => [ "timestamp" ]
}
mutate {
remove_field => [ "time" ,"month","monthday","year","timestamp"]
}
}
}