refactor rsyslog input for router role
diff --git a/metadata/service/server/amqp/router.yml b/metadata/service/server/amqp/router.yml
index ba1f8f0..8b26c84 100644
--- a/metadata/service/server/amqp/router.yml
+++ b/metadata/service/server/amqp/router.yml
@@ -18,23 +18,12 @@
decoder: ProtoBufDecoder
splitter: HekaFramingSplitter
prefetch_count: 20
- rsyslog_kern:
- engine: logstreamer
- log_directory: /var/log
- file_match: kern\.log\.?(?P<Index>\d+)?(.gz)?
- priority: ["^Index"]
- decoder: RsyslogDecoder
rsyslog_syslog:
engine: logstreamer
log_directory: /var/log
- file_match: syslog\.?(?P<Index>\d+)?(.gz)?
+ file_match: "?P<Service>daemon\.log|cron\.log|mail\.log|kern\.log|auth\.log|syslog|messages|debug)\.?(?P<Index>\d+)?(.gz)?"
priority: ["^Index"]
- decoder: RsyslogDecoder
- rsyslog_auth:
- engine: logstreamer
- log_directory: /var/log
- file_match: auth\.log\.?(?P<Index>\d+)?(.gz)?
- priority: ["^Index"]
+ differentiator: [ "rsyslog-", "Service" ]
decoder: RsyslogDecoder
decoder:
rsyslog: