{"action":"created","issue":{"url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs/issues/21","repository_url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs","labels_url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs/issues/21/labels{/name}","comments_url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs/issues/21/comments","events_url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs/issues/21/events","html_url":"https://github.com/logstash-plugins/logstash-input-azure_event_hubs/issues/21","id":371245241,"node_id":"MDU6SXNzdWUzNzEyNDUyNDE=","number":21,"title":"Add filter and grok configuration to documentation","user":{"login":"aj-devops-wi","id":28630614,"node_id":"MDQ6VXNlcjI4NjMwNjE0","avatar_url":"https://avatars3.githubusercontent.com/u/28630614?v=4","gravatar_id":"","url":"https://api.github.com/users/aj-devops-wi","html_url":"https://github.com/aj-devops-wi","followers_url":"https://api.github.com/users/aj-devops-wi/followers","following_url":"https://api.github.com/users/aj-devops-wi/following{/other_user}","gists_url":"https://api.github.com/users/aj-devops-wi/gists{/gist_id}","starred_url":"https://api.github.com/users/aj-devops-wi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aj-devops-wi/subscriptions","organizations_url":"https://api.github.com/users/aj-devops-wi/orgs","repos_url":"https://api.github.com/users/aj-devops-wi/repos","events_url":"https://api.github.com/users/aj-devops-wi/events{/privacy}","received_events_url":"https://api.github.com/users/aj-devops-wi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-10-17T20:04:33Z","updated_at":"2018-10-17T21:03:02Z","closed_at":null,"author_association":"NONE","body":"Has there been any thought to adding filter and grok documentation to this plugin, to turn ELK into more of a turn-key product for Azure integration?  Event Hub is a great integration point for getting log data out of Azure into Elastic, but by default much of the diagnostics log data is retrieved in a format that needs heavy filtering and grok-ing.\r\n\r\nBy comparison, the Azure Blob plugin has plenty of filter and grok examples for getting the data into a usable form, usually only needing minor tweaks:  https://github.com/Azure/azure-diagnostics-tools/tree/master/Logstash/logstash-input-azureblob "},"comment":{"url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs/issues/comments/430788784","html_url":"https://github.com/logstash-plugins/logstash-input-azure_event_hubs/issues/21#issuecomment-430788784","issue_url":"https://api.github.com/repos/logstash-plugins/logstash-input-azure_event_hubs/issues/21","id":430788784,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMDc4ODc4NA==","user":{"login":"jakelandis","id":976291,"node_id":"MDQ6VXNlcjk3NjI5MQ==","avatar_url":"https://avatars2.githubusercontent.com/u/976291?v=4","gravatar_id":"","url":"https://api.github.com/users/jakelandis","html_url":"https://github.com/jakelandis","followers_url":"https://api.github.com/users/jakelandis/followers","following_url":"https://api.github.com/users/jakelandis/following{/other_user}","gists_url":"https://api.github.com/users/jakelandis/gists{/gist_id}","starred_url":"https://api.github.com/users/jakelandis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakelandis/subscriptions","organizations_url":"https://api.github.com/users/jakelandis/orgs","repos_url":"https://api.github.com/users/jakelandis/repos","events_url":"https://api.github.com/users/jakelandis/events{/privacy}","received_events_url":"https://api.github.com/users/jakelandis/received_events","type":"User","site_admin":false},"created_at":"2018-10-17T21:03:02Z","updated_at":"2018-10-17T21:03:02Z","author_association":"CONTRIBUTOR","body":">  would you just want sample logstash filters in the recipes, or are these generally created as actual ruby filters that would be added to the plugin?\r\n\r\nFilters or Ruby (via the ruby filter) doesn't matter much. I would expect the difficult part is understanding the data model well enough to make sense of the data. I am sure the community would benefit from that knowledge however it may be presented. "}}
{"actor":{"display_login":"jakelandis"}}