From 4af1236e9c318f76c93403674f29a704648ce314 Mon Sep 17 00:00:00 2001 From: Ward Poelmans Date: Wed, 12 Mar 2025 15:10:23 +0100 Subject: [PATCH] order of patterns matters --- tests/logstash_7.6.2.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tests/logstash_7.6.2.conf b/tests/logstash_7.6.2.conf index 92e1c00..6c7b7d0 100644 --- a/tests/logstash_7.6.2.conf +++ b/tests/logstash_7.6.2.conf @@ -36,10 +36,11 @@ filter "%{RSYSLOGPREFIX}%{OPENNEBULA_MSG}", "%{RSYSLOGPREFIX}%{JUBE_MSG}", "%{RSYSLOGPREFIX}%{SHOREWALL_MSG}", - "%{RSYSLOGPREFIX}%{KEYVALUE_MSG}", "%{RSYSLOGPREFIX}%{QUATTOR_MSG}", "%{RSYSLOGPREFIX}%{SNOOPY_MSG}", "%{RSYSLOGPREFIX}%{APACHE_MSG}", + # Last resort, this should be one to last + "%{RSYSLOGPREFIX}%{KEYVALUE_MSG}", # RSYSLOGCUSTOM always last (and no PREFIX)! "%{RSYSLOGCUSTOM}" ]