2025-07-04 09:00:19 +02:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
sources:
|
|
|
|
|
in_logs_zimbra:
|
|
|
|
|
type: file
|
|
|
|
|
include:
|
|
|
|
|
- /opt/zimbra/log/*.log
|
2025-08-26 15:00:22 +02:00
|
|
|
- /opt/zimbra/log/access_log*
|
|
|
|
|
exclude:
|
|
|
|
|
- /opt/zimbra/log/hs_err*
|
|
|
|
|
- /opt/zimbra/log/*.gz
|
|
|
|
|
- /opt/zimbra/log/*.pid
|
2025-07-04 09:00:19 +02:00
|
|
|
|
|
|
|
|
transforms:
|
2025-08-26 15:00:22 +02:00
|
|
|
reduce_logs_zimbra_stack:
|
|
|
|
|
type: reduce
|
|
|
|
|
inputs: ["in_logs_zimbra"]
|
|
|
|
|
merge_strategies:
|
|
|
|
|
message: concat_newline
|
|
|
|
|
timestamp: discard
|
|
|
|
|
group_by:
|
|
|
|
|
- file
|
|
|
|
|
starts_when:
|
|
|
|
|
type: vrl
|
|
|
|
|
source: |
|
|
|
|
|
!match(string!(.message), r'^(\s+at\s|Caused by:\s|com\.zimbra\.common\.service\.ServiceException)')
|
|
|
|
|
|
2025-07-04 09:00:19 +02:00
|
|
|
format_logs_zimbra:
|
|
|
|
|
type: remap
|
2025-08-26 15:00:22 +02:00
|
|
|
inputs: ["reduce_logs_zimbra_stack"]
|
2025-07-04 09:00:19 +02:00
|
|
|
source: |
|
|
|
|
|
# Nothing to do
|
