metadata/service/server/amqp/compute.yml

applications:
- heka
_param:
parameters:
  heka:
    server:
      enabled: true
      input:
        rsyslog_syslog:
          engine: logstreamer
          log_directory: /var/log
          file_match: syslog\.?(?P<Index>\d+)?(.gz)?
          priority: ["^Index"]
          decoder: RsyslogDecoder
        rsyslog_auth:
          engine: logstreamer
          log_directory: /var/log
          file_match: auth\.log\.?(?P<Index>\d+)?(.gz)?
          priority: ["^Index"]
          decoder: RsyslogDecoder
        rsyslog_kern:
          engine: logstreamer
          log_directory: /var/log
          file_match: kern\.log\.?(?P<Index>\d+)?(.gz)?
          priority: ["^Index"]
          decoder: RsyslogDecoder
        nova_compute:
          engine: logstreamer
          log_directory: /var/log/nova
          file_match: nova-compute\.log\.?(?P<Index>\d+)?(.gz)?
          priority: ["^Index"]
          decoder: multidecoder_openstack
        libvirtd:
          engine: logstreamer
          log_directory: /var/log/libvirt
          file_match: libvirtd\.log\.?(?P<Index>\d+)?(.gz)?
          priority: ['^Index']
          decoder: multidecoder_libvirtd
        contrail_vrouter_agent:
          engine: logstreamer
          log_directory: /var/log/contrail
          file_match: contrail-vrouter-agent\.log\.?(?P<Index>\d+)?(.gz)?
          priority: ['^Index']
          decoder: contrail_vrouter_agent
      decoder:
        rsyslog:
          engine: rsyslog
          template: \%TIMESTAMP\% \%HOSTNAME\% \%syslogtag\%\%msg:::sp-if-no-1st-sp\%\%msg:::drop-last-lf\%\n
          hostname_keep: TRUE
          tz: Europe/Prague
        openstack:
          engine: multidecoder
          subs: [ 'Payloadregex_OpenStackLog','Payloadregex_OpenStackLogTrace' ]
          cascade_strategy: first-wins
          log_sub_errors: "false"
        OpenStackLog:
          engine: payloadregex
          match_regex: ^(?P<timestamp>\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}.\d{3})\s(?P<pid>\d+)\s(?P<severity>\w+)\s(?P<programname>\D+)\s\[(?P<id>.+)\]\s(?P<payload>.*)
          timestamp_layout: "2015-10-06 11:34:37.243"
        OpenStackLogTrace:
          engine: payloadregex
          match_regex: ^(?P<timestamp>\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}.\d{3})\s(?P<pid>\d+)\s(?P<severity>TRACE)\s(?P<programname>.\S+)\s(?P<payload>.*)
          timestamp_layout: "2015-10-06 11:34:37.243"
        openstacksandbox:
          engine: sandbox
          file_name: "/etc/heka/plugins.d/decoders/openstack.lua"
          module_directory: "/etc/heka/plugins.d/common;/usr/share/heka/lua_modules"
        libvirtd:
          engine: multidecoder
          subs: [ 'Payloadregex_libvirtcommon', 'Payloadregex_libvirtaudit' ]
          cascade_strategy: first-wins
          log_sub_errors: "false"
        libvirtcommon:
          engine: payloadregex
          match_regex: ^(?P<timestamp>\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}.\d{3}\+\d{4}):\s+(?P<pid>\d+):\s+(?P<severity>\w+)\s+:\s+(?P<qemutrace>\w+:\d+)\s+:\s+(?P<payload>.*)
          timestamp_layout: "2015-09-01 15:56:14.675+0000"
        libvirtaudit:
          engine: payloadregex
          match_regex: ^(?P<timestamp>\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}.\d{3}\+\d{4}):\s+(?P<pid>\d+):\s+(?P<severity>\w+)\s+:\s+(?P<message>.+):\s(?P<payload>.+)
          timestamp_layout: "2015-09-01 15:56:14.675+0000"
        contrail_vrouter_agent:
          engine: payloadregex
          match_regex: (?P<timestamp>\d{4}-\d{1,2}-\d{1,2}\s\w+\s\d{2}:\d{2}:\d{2}:\d{3}.\d{3})\s\w+\s.+\s\[Thread (\d+), Pid (?P<pid>\d+)]:\s(?P<message>.+)
          timestamp_layout: "2015-09-01 15:56:14.675+0000"
      output:
        rabbitmq:
          engine: amqp
          host: ${_param:heka_shipper_output_host}
          user: ${_param:heka_shipper_output_user}
          password: ${_param:heka_shipper_output_password}
          vhost: ${_param:heka_shipper_output_vhost}
          exchange: ${_param:heka_shipper_output_exchange}
          exchange_type: fanout
          encoder: ProtobufEncoder
          use_framing: true
          message_matcher: "TRUE"
      filter: {}
      splitter: {}