logit logstash filters: change alb_access log type to aws_lb_access

this is what i unknowingly added the inputs in logit as in prod and staging, and it will be painful to change now. also it may be more accurate for LBs that are not ALBs
alphagov · Sep 26, 2023 · 978f38e · 978f38e
1 parent 85045bc
commit 978f38e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/config/logit/filters.d/10_base.conf b/config/logit/filters.d/10_base.conf
@@ -1,4 +1,4 @@
-if [type] != 'alb_access' {
+if [type] != 'aws_lb_access' {
     mutate {
         add_field => [ "type", "syslog" ]
     }

diff --git a/config/logit/filters.d/99_clean_alb_access.conf b/config/logit/filters.d/99_clean_alb_access.conf
@@ -1,14 +1,14 @@
 #
-# Fix up the datapoints for the alb_access log type
+# Fix up the datapoints for the aws_lb_access log type
 #
-if [@input] == "alb_access" {
+if [@input] == "aws_lb_access" {
     ## remove extraneous fields
     mutate {
         remove_field => [ '[@shipper][name]', '[@source][component]', '[@source][type]' ]
     }
 
     ## set @type
     mutate {
-        replace => { "@type" => "alb_access" }
+        replace => { "@type" => "aws_lb_access" }
     }
 }