{"action":"created","issue":{"url":"https://api.github.com/repos/rcbops/rpc-openstack/issues/1281","repository_url":"https://api.github.com/repos/rcbops/rpc-openstack","labels_url":"https://api.github.com/repos/rcbops/rpc-openstack/issues/1281/labels{/name}","comments_url":"https://api.github.com/repos/rcbops/rpc-openstack/issues/1281/comments","events_url":"https://api.github.com/repos/rcbops/rpc-openstack/issues/1281/events","html_url":"https://github.com/rcbops/rpc-openstack/pull/1281","id":168913686,"number":1281,"title":"Enumerate log file targets and multiline config","user":{"login":"sigmavirus24","id":240830,"avatar_url":"https://avatars.githubusercontent.com/u/240830?v=3","gravatar_id":"","url":"https://api.github.com/users/sigmavirus24","html_url":"https://github.com/sigmavirus24","followers_url":"https://api.github.com/users/sigmavirus24/followers","following_url":"https://api.github.com/users/sigmavirus24/following{/other_user}","gists_url":"https://api.github.com/users/sigmavirus24/gists{/gist_id}","starred_url":"https://api.github.com/users/sigmavirus24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sigmavirus24/subscriptions","organizations_url":"https://api.github.com/users/sigmavirus24/orgs","repos_url":"https://api.github.com/users/sigmavirus24/repos","events_url":"https://api.github.com/users/sigmavirus24/events{/privacy}","received_events_url":"https://api.github.com/users/sigmavirus24/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"d34dh0r53","id":248299,"avatar_url":"https://avatars.githubusercontent.com/u/248299?v=3","gravatar_id":"","url":"https://api.github.com/users/d34dh0r53","html_url":"https://github.com/d34dh0r53","followers_url":"https://api.github.com/users/d34dh0r53/followers","following_url":"https://api.github.com/users/d34dh0r53/following{/other_user}","gists_url":"https://api.github.com/users/d34dh0r53/gists{/gist_id}","starred_url":"https://api.github.com/users/d34dh0r53/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/d34dh0r53/subscriptions","organizations_url":"https://api.github.com/users/d34dh0r53/orgs","repos_url":"https://api.github.com/users/d34dh0r53/repos","events_url":"https://api.github.com/users/d34dh0r53/events{/privacy}","received_events_url":"https://api.github.com/users/d34dh0r53/received_events","type":"User","site_admin":false},"assignees":[{"login":"d34dh0r53","id":248299,"avatar_url":"https://avatars.githubusercontent.com/u/248299?v=3","gravatar_id":"","url":"https://api.github.com/users/d34dh0r53","html_url":"https://github.com/d34dh0r53","followers_url":"https://api.github.com/users/d34dh0r53/followers","following_url":"https://api.github.com/users/d34dh0r53/following{/other_user}","gists_url":"https://api.github.com/users/d34dh0r53/gists{/gist_id}","starred_url":"https://api.github.com/users/d34dh0r53/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/d34dh0r53/subscriptions","organizations_url":"https://api.github.com/users/d34dh0r53/orgs","repos_url":"https://api.github.com/users/d34dh0r53/repos","events_url":"https://api.github.com/users/d34dh0r53/events{/privacy}","received_events_url":"https://api.github.com/users/d34dh0r53/received_events","type":"User","site_admin":false},{"login":"evrardjp","id":3110235,"avatar_url":"https://avatars.githubusercontent.com/u/3110235?v=3","gravatar_id":"","url":"https://api.github.com/users/evrardjp","html_url":"https://github.com/evrardjp","followers_url":"https://api.github.com/users/evrardjp/followers","following_url":"https://api.github.com/users/evrardjp/following{/other_user}","gists_url":"https://api.github.com/users/evrardjp/gists{/gist_id}","starred_url":"https://api.github.com/users/evrardjp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/evrardjp/subscriptions","organizations_url":"https://api.github.com/users/evrardjp/orgs","repos_url":"https://api.github.com/users/evrardjp/repos","events_url":"https://api.github.com/users/evrardjp/events{/privacy}","received_events_url":"https://api.github.com/users/evrardjp/received_events","type":"User","site_admin":false}],"milestone":null,"comments":5,"created_at":"2016-08-02T15:22:14Z","updated_at":"2016-08-03T15:55:52Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rcbops/rpc-openstack/pulls/1281","html_url":"https://github.com/rcbops/rpc-openstack/pull/1281","diff_url":"https://github.com/rcbops/rpc-openstack/pull/1281.diff","patch_url":"https://github.com/rcbops/rpc-openstack/pull/1281.patch"},"body":"Using more than one prospector allows us to configure the openstack\r\nservices with multiline log parsing. This prevents us from applying\r\nthat same logic to non-OpenStack services (which will mess up log\r\nshipping). It also allows us to define multiline rules for each of\r\nthe services we hope to ship to logstash with multiline log messages.\r\n\r\nFilebeat will ignore directories/paths that do not actually exist on\r\nthe host so we can safely enumerate all of the services we want to\r\napply multiline parsing to in one prospector.\r\n\r\nWe *do* have to, however, ensure that paths do not overlap with the\r\nprospectors. Filebeat explicitly calls this out as \"undefined\"\r\nbehaviour.\r\n\r\nIncluded near the multline configurations are play.golang.org links so\r\nothers can experiment with what we used to test the multiline regular\r\nexpressions. Also, given the complexity and widespread use of our\r\nOpenStack multiline expression, we've attempted to thoroughly document\r\nit.\r\n\r\nConnects rcbops/u-suk-dev#261"},"comment":{"url":"https://api.github.com/repos/rcbops/rpc-openstack/issues/comments/237280679","html_url":"https://github.com/rcbops/rpc-openstack/pull/1281#issuecomment-237280679","issue_url":"https://api.github.com/repos/rcbops/rpc-openstack/issues/1281","id":237280679,"user":{"login":"evrardjp","id":3110235,"avatar_url":"https://avatars.githubusercontent.com/u/3110235?v=3","gravatar_id":"","url":"https://api.github.com/users/evrardjp","html_url":"https://github.com/evrardjp","followers_url":"https://api.github.com/users/evrardjp/followers","following_url":"https://api.github.com/users/evrardjp/following{/other_user}","gists_url":"https://api.github.com/users/evrardjp/gists{/gist_id}","starred_url":"https://api.github.com/users/evrardjp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/evrardjp/subscriptions","organizations_url":"https://api.github.com/users/evrardjp/orgs","repos_url":"https://api.github.com/users/evrardjp/repos","events_url":"https://api.github.com/users/evrardjp/events{/privacy}","received_events_url":"https://api.github.com/users/evrardjp/received_events","type":"User","site_admin":false},"created_at":"2016-08-03T15:55:52Z","updated_at":"2016-08-03T15:55:52Z","body":"The code seems fine and I see multiline content in my kibana. However, I didn't fully test it.\r\nIt looks generally ok.\r\n\r\nIf it passes gates, it has my 👍 "}}
{"actor":{"display_login":"evrardjp"}}