Skip to content

Commit 7592c98

Browse files
authored
Merge pull request #194 from whyscream/150-remove-incomplete-aggregation-example
Remove the aggregation example
2 parents 858e0eb + aee93f5 commit 7592c98

File tree

3 files changed

+0
-52
lines changed

3 files changed

+0
-52
lines changed

51-filter-postfix-aggregate.conf

Lines changed: 0 additions & 40 deletions
This file was deleted.

README.md

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -19,18 +19,6 @@ The included Logstash config file requires two input fields to exist in input ev
1919

2020
This event format is supported by the Logstash `syslog` input plugin out of the box, but several other plugins produce input that can be adapted fairly easy to produce these fields too. See [ALTERNATIVE INPUTS](ALTERNATIVE-INPUTS.md) for details.
2121

22-
Aggregation filter
23-
-----
24-
25-
A optional aggregation filter is available, that will combine fields from different log lines. The key on which log lines are aggregated is the postfix queue id. For example:
26-
27-
![Alt text](aggregation_example_pic.jpg?raw=true)
28-
29-
In this example, the `postfix_from` field from a `postfix/qmgr` log line is reused, and added to a log line from `postfix/smtp`.
30-
31-
To use the aggregation filter, add `51-filter-postfix-aggregate.conf` to `/etc/logstash/conf.d` or `pipeline` dir for dockerized Logstash.
32-
33-
3422
Tests
3523
-----
3624

aggregation_example_pic.jpg

-88.8 KB
Binary file not shown.

0 commit comments

Comments
 (0)