From 0af7178d3d70abc45a9d54d05c2e590d8107b59d Mon Sep 17 00:00:00 2001
From: Bertrand Lallau <bertrand.lallau@gmail.com>
Date: Fri, 8 Sep 2017 22:31:26 +0200
Subject: [PATCH] Fluentd: progname field is missing with Rsyslog
progname is actually only fullfilled for Openstack logs and infra logs.
They are missing for program logging in RSYSLOG: HAPROXY and SWIFT.
When using Kibana, "progname" field appears empty, hence it's difficult
to know where logs come from.
Change-Id: Iae98af083cfb79d2a64fa0b70c86b0a01f7a336f
Closes-Bug: #1716051
---
.../conf/filter/00-record_transformer.conf.j2 | 14 ++++++++++++++
1 file changed, 14 insertions(+)
diff --git a/ansible/roles/common/templates/conf/filter/00-record_transformer.conf.j2 b/ansible/roles/common/templates/conf/filter/00-record_transformer.conf.j2
index 1db6f47cb..00c417392 100644
--- a/ansible/roles/common/templates/conf/filter/00-record_transformer.conf.j2
+++ b/ansible/roles/common/templates/conf/filter/00-record_transformer.conf.j2
@@ -13,3 +13,17 @@
programname ${tag_parts[1]}
</record>
</filter>
+
+<filter syslog.local0.**>
+ @type record_transformer
+ <record>
+ programname swift
+ </record>
+</filter>
+
+<filter syslog.local1.**>
+ @type record_transformer
+ <record>
+ programname haproxy
+ </record>
+</filter>
--
GitLab