Skip to content
This repository was archived by the owner on Dec 14, 2022. It is now read-only.
This repository was archived by the owner on Dec 14, 2022. It is now read-only.

Make sure filebeat is not mixing up OpenTraffic with other Log-Files auch as Audit-Log #145

@cwiechmann

Description

@cwiechmann

Is your feature request related to a problem? Please describe.
In some API-Gateway configuration it might be the case, that OpenTraffic and for instance Audit-Log are written to the same directory. Or they just use the same Volume-Share.

This results into the following file listing:

audit.log
DefaultGroup_traffic-7dd9698fdf-vc4j8_traffic_2021-09-16-323.log
audit.log.0
DefaultGroup_traffic-7dd9698fdf-vc4j8_traffic_2021-09-16-324.log
audit.log.1
DefaultGroup_traffic-7dd9698fdf-vc4j8_traffic_2021-09-16-322.log
audit.log.10
DefaultGroup_traffic-7dd9698fdf-vc4j8_traffic_2021-09-16-321.log

With the currently used Filebeat-Pattern:

/var/log/opentraffic/*.log

there might be a chance, esp. when using the same shared-volume, that for instance such an Audit-Log-File is picked and considered as OpenTraffic. This is causing an error in the Logstash processing.

Describe the solution you'd like
The pattern for the OpenTraffic-File should be more precise. e.g. /var/log/opentraffic/*_traffic_*.log

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions