From 9526e417a4db490b20d8823ac8775f29409cd74e Mon Sep 17 00:00:00 2001 From: MarneusCalgarXP Date: Tue, 8 Apr 2014 10:47:39 +0200 Subject: [PATCH] Update index.md: "message" instead of "@message" the field "@message" is now named "message" in recent logstash versions (ie v1.3.3) --- recipes/color-codes/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes/color-codes/index.md b/recipes/color-codes/index.md index 574b89b..decba11 100644 --- a/recipes/color-codes/index.md +++ b/recipes/color-codes/index.md @@ -26,7 +26,7 @@ incoming message like this: # Get rid of color codes mutate { - gsub => ["@message", "\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[m|K]", ""] + gsub => ["message", "\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[m|K]", ""] } will result in the Ruby logs becoming this: @@ -34,4 +34,4 @@ will result in the Ruby logs becoming this: D, [2013-01-17T14:59:52.415396 #10324] DEBUG -- : Product Load (0.8ms) SELECT `product`.* FROM `products` WHERE `products`.`id` = 14 LIMIT 1 D, [2013-01-17T14:59:52.436057 #10324] DEBUG -- : User Load (1.0ms) SELECT `users`.* FROM `users` WHERE `users`.`id` = '123' LIMIT 1 -These logs are then more easily grokked as the logs are now in a predictable format. \ No newline at end of file +These logs are then more easily grokked as the logs are now in a predictable format.