mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-08-02 23:05:41 +02:00
19 lines
408 B
YAML
19 lines
408 B
YAML
---
|
|
|
|
sources:
|
|
in_logs_vault:
|
|
type: file
|
|
include:
|
|
- /opt/vault/log/audit.json
|
|
|
|
transforms:
|
|
format_logs_vault:
|
|
type: remap
|
|
inputs: ["in_logs_vault"]
|
|
source: |
|
|
.message = string!(.message)
|
|
if (is_json(.message)) {
|
|
.vault = parse_json!(.message)
|
|
.timestamp = parse_timestamp(del(.vault.time), format: "%FT%H:%M:%S%.fZ", timezone: "UTC") ?? now()
|
|
}
|