Merge pull request #8020 from lchapman4/Cassandra-Default-Parsing-Rule

Cassandra default parsing rule
newrelic · Jun 13, 2022 · 63d2eac · 63d2eac
2 parents 8dc102b + 40d30b1
commit 63d2eac
Show file tree

Hide file tree

Showing 2 changed files with 29 additions and 0 deletions.
diff --git a/...e/host-integrations/host-integrations-list/cassandra-monitoring-integration.mdx b/...e/host-integrations/host-integrations-list/cassandra-monitoring-integration.mdx
@@ -111,6 +111,13 @@ Additional notes:
        ```
     4. Edit the `cassandra-config.yml` file as described in the [configuration settings](#config).
     5. [Restart](/docs/infrastructure/new-relic-infrastructure/configuration/start-stop-restart-check-infrastructure-agent-status) the infrastructure agent.
+    6. To enable automatic Cassandra error log parsing and forwarding, copy (or rename) the `cassandra-log.yml.example` file to `cassandra-log.yml`. No need to restart the agent.
+
+       **Example:**
+
+       ```
+       sudo cp /etc/newrelic-infra/logging.d/casssandra-log.yml.example /etc/newrelic-infra/logging.d/cassandra-log.yml
+       ```    
   </Collapser>
 </CollapserGroup>
 

diff --git a/src/content/docs/logs/ui-data/built-log-parsing-rules.mdx b/src/content/docs/logs/ui-data/built-log-parsing-rules.mdx
@@ -429,6 +429,28 @@ New Relic can parse common log formats according to built-in rules, so that you
     </table>
   </Collapser>
 
+  <Collapser
+    id="cassandra"
+    title="Cassandra"
+  >
+    Source: `logtype = 'cassandra'`
+
+    Grok
+
+    ```grok
+    %{WORD:cassandra.log.level}%{SPACE}\\[%{NOTSPACE:cassandra.thread}\\] %{TIMESTAMP_ISO8601:cassandra.timestamp} %{NOTSPACE:cassandra.source}:%{INT:cassandra.line.number} - %{GREEDYDATA:cassandra.message}
+    ```
+
+    ### Results
+
+    * `cassandra.log.level`: The log level of the message (all, trace, debug, info, warn, error, off)
+    * `cassandra.thread`: The name of the thread issuing the log statement
+    * `cassandra.timestamp`: The timestamp of the log statement
+    * `cassandra.source`: The source file name
+    * `cassandra.line.number`: The line number of the message   
+    * `cassandra.message`: The raw cassandra message
+  </Collapser>
+
   <Collapser
     id="cloudfront"
     title="Cloudfront"