From b10bd0f73452faf75a6d63a592ae53039f4b4f43 Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <dbd@ehtrace.com>
Date: Tue, 26 Aug 2025 15:00:22 +0200
Subject: [PATCH] Update to 2025-08-26 15:00

---
 roles/zimbra/templates/vector.yml | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/roles/zimbra/templates/vector.yml b/roles/zimbra/templates/vector.yml
index 645e39d..6be71d1 100644
--- a/roles/zimbra/templates/vector.yml
+++ b/roles/zimbra/templates/vector.yml
@@ -5,10 +5,28 @@ sources:
     type: file
     include:
       - /opt/zimbra/log/*.log
+      - /opt/zimbra/log/access_log*
+    exclude:
+      - /opt/zimbra/log/hs_err*
+      - /opt/zimbra/log/*.gz
+      - /opt/zimbra/log/*.pid
 
 transforms:
+  reduce_logs_zimbra_stack:
+    type: reduce
+    inputs: ["in_logs_zimbra"]
+    merge_strategies:
+      message: concat_newline
+      timestamp: discard
+    group_by:
+      - file
+    starts_when:
+      type: vrl
+      source: |
+        !match(string!(.message), r'^(\s+at\s|Caused by:\s|com\.zimbra\.common\.service\.ServiceException)')
+
   format_logs_zimbra:
     type: remap
-    inputs: ["in_logs_zimbra"]
+    inputs: ["reduce_logs_zimbra_stack"]
     source: |
       # Nothing to do