You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: packages/cisco_ios/data_stream/log/elasticsearch/ingest_pipeline/default.yml
+8-8Lines changed: 8 additions & 8 deletions
Original file line number
Diff line number
Diff line change
@@ -86,7 +86,7 @@ processors:
86
86
UTC as before.
87
87
if: ctx._temp_?.cisco_timestamp != null
88
88
source: |-
89
-
String get_timezone(def ctx) {
89
+
String get_timezone(def ctx) {
90
90
if (ctx._temp_?.tz != null) {
91
91
if (ctx._conf?.tz_map != null) {
92
92
for (def item : ctx._conf.tz_map) {
@@ -95,24 +95,24 @@ processors:
95
95
}
96
96
}
97
97
}
98
-
98
+
99
99
if (ctx._temp_.tz.length() <= 4) {
100
100
// all time zone abbreviations need to be uppercase
101
101
return ctx._temp_.tz.toUpperCase();
102
102
}
103
-
103
+
104
104
return ctx._temp_.tz;
105
105
}
106
-
106
+
107
107
if (ctx._conf?.tz_offset != null) {
108
108
ctx.event.timezone = ctx._conf.tz_offset;
109
109
return ctx._conf.tz_offset;
110
110
}
111
-
111
+
112
112
ctx.event.timezone = 'UTC';
113
113
return 'UTC';
114
114
}
115
-
115
+
116
116
def event_timezone = get_timezone(ctx);
117
117
if (!event_timezone.contains('+') && !event_timezone.contains('-') && !(event_timezone.length() > 4)) {
118
118
// timezone abbreviation e.g. CEST need to be put inside the timestamp
@@ -245,7 +245,7 @@ processors:
245
245
- grok:
246
246
field: message
247
247
tag: grok_message_rp_join
248
-
patterns:
248
+
patterns:
249
249
- 'Received \(%{PIM_SOURCE}, %{DATA:cisco.ios.pim.group.ip}\) %{WORD:cisco.ios.action} from %{IP:source.address} for %{DATA:cisco.ios.outcome} %{IP:destination.address}'
0 commit comments