githubarchive-elastic/logstash.conf at master · loekvangool/githubarchive-elastic · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
input {
    stdin {
        codec => json_lines
    }
}

filter {
    date {
        match => [ "created_at", "ISO8601" ]
        timezone => "UTC"
        locale => en
        target => "@timestamp"
    }

    if [type] == "PullRequestEvent" {
        mutate {
            add_field => { "[payload][pull_request][submitter_and_actor]" => ["%{[payload][pull_request][head][user][login}", "%{[actor][login]}"] }
            add_field => { "[payload][pull_request][submitter_and_actor_combi]" => "%{[payload][pull_request][head][user][login} | %{[actor][login]}" }
        }
    }
}

output {
    elasticsearch {
        index           => "githubarchive-%{+YYYY}"
        document_type   => "%{type}"
        document_id     => "%{id}"
        user            => ""
        password        => ""
        hosts           => ""
	manage_template => false
    }
}