Skip to content

format: rawjson not working as expected #127

@jlambert121

Description

@jlambert121

I had posted this to a closed ticket (#111) and decided that may not be the best place. I am running the latest version from master and rawjson still doesn't seem to be doing what I expect...

This is the lines in my beaver.conf:

[/var/log/httpd/www-https_access.json]
type: apache
tags: access,www-https,demo
format: rawjson

This is the line in /var/log/httpd/www-https_access.json

{
    "@timestamp": "2013-04-17T17:12:11+0000",
    "@fields": {
        "proxied_for": "-",
        "client": "1.1.1.1",
        "duration_usec": 35426,
        "status": 200,
        "request": "/api/status",
        "method": "GET",
        "referrer": "-",
        "response_size": "44",
        "user_agent": "ELB-HealthChecker/1.0"
    }
}

And this is the line that shows up in redis:

{
    "@source": "file://ue1a-demoweb02.company.com/var/log/httpd/www-https_access.json",
    "@source_host": "ue1a-demoweb02.company.com",
    "@message": "{ \"@timestamp\": \"2013-04-17T17: 12: 11+0000\", \"@fields\": { \"proxied_for\": \"-\", \"client\": \"1.1.1.1\", \"duration_usec\": 35426, \"status\": 200, \"request\": \"/api/status\", \"method\": \"GET\", \"referrer\": \"-\", \"response_size\": \"44\", \"user_agent\": \"ELB-HealthChecker/1.0\" } }",
    "@tags": [
        "access",
        "www-https",
        "demo"
    ],
    "@fields": {

    },
    "@timestamp": "2013-04-17T17:12:11.499582Z",
    "@source_path": "/var/log/httpd/www-https_access.json",
    "@type": "apache"
}

Thoughts as to what I'm doing incorrectly?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions