changed field name

SpringerPE · Nov 30, 2018 · b69db51 · b69db51
1 parent e9cfeaa
commit b69db51
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/manifest/operations/pipelines/cf-platform-es.yml b/manifest/operations/pipelines/cf-platform-es.yml
@@ -87,7 +87,7 @@
               # Manually parse the log for RFC5424
               grok {
                 break_on_match => true
-                match => { "@raw" => "%{SYSLOG5424LINE}" }
+                match => { "@message" => "%{SYSLOG5424LINE}" }
               }
           
               if [syslog5424_ts] {

diff --git a/manifest/operations/pipelines/cf-platform-es/filter-10-syslog_rfc5424_parsing.conf b/manifest/operations/pipelines/cf-platform-es/filter-10-syslog_rfc5424_parsing.conf
@@ -2,7 +2,7 @@ filter {
     # Manually parse the log for RFC5424
     grok {
       break_on_match => true
-      match => { "@raw" => "%{SYSLOG5424LINE}" }
+      match => { "@message" => "%{SYSLOG5424LINE}" }
     }
 
     if [syslog5424_ts] {