Skip to content

format: rawjson not working as expected #127

@jlambert121

Description

@jlambert121

I had posted this to a closed ticket (#111) and decided that may not be the best place. I am running the latest version from master and rawjson still doesn't seem to be doing what I expect...

This is the lines in my beaver.conf:

[/var/log/httpd/www-https_access.json]
type: apache
tags: access,www-https,demo
format: rawjson

This is the line in /var/log/httpd/www-https_access.json

{
    "@timestamp": "2013-04-17T17:12:11+0000",
    "@fields": {
        "proxied_for": "-",
        "client": "1.1.1.1",
        "duration_usec": 35426,
        "status": 200,
        "request": "/api/status",
        "method": "GET",
        "referrer": "-",
        "response_size": "44",
        "user_agent": "ELB-HealthChecker/1.0"
    }
}

And this is the line that shows up in redis:

{
    "@source": "file://ue1a-demoweb02.company.com/var/log/httpd/www-https_access.json",
    "@source_host": "ue1a-demoweb02.company.com",
    "@message": "{ \"@timestamp\": \"2013-04-17T17: 12: 11+0000\", \"@fields\": { \"proxied_for\": \"-\", \"client\": \"1.1.1.1\", \"duration_usec\": 35426, \"status\": 200, \"request\": \"/api/status\", \"method\": \"GET\", \"referrer\": \"-\", \"response_size\": \"44\", \"user_agent\": \"ELB-HealthChecker/1.0\" } }",
    "@tags": [
        "access",
        "www-https",
        "demo"
    ],
    "@fields": {

    },
    "@timestamp": "2013-04-17T17:12:11.499582Z",
    "@source_path": "/var/log/httpd/www-https_access.json",
    "@type": "apache"
}

Thoughts as to what I'm doing incorrectly?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions