---

sources:
  in_logs_zimbra:
    type: file
    include:
      - /opt/zimbra/log/*.log
      - /opt/zimbra/log/access_log*
    exclude:
      - /opt/zimbra/log/hs_err*
      - /opt/zimbra/log/*.gz
      - /opt/zimbra/log/*.pid

transforms:
  reduce_logs_zimbra_stack:
    type: reduce
    inputs: ["in_logs_zimbra"]
    merge_strategies:
      message: concat_newline
      timestamp: discard
    group_by:
      - file
    starts_when:
      type: vrl
      source: |
        !match(string!(.message), r'^(\s+at\s|Caused by:\s|com\.zimbra\.common\.service\.ServiceException)')

  format_logs_zimbra:
    type: remap
    inputs: ["reduce_logs_zimbra_stack"]
    source: |
      # Nothing to do