Skip to content

Cherry-pick #7991 to 6.x: Add tag "truncated" to "log.flags" if incoming line is longer than configured limit#8165

Merged
kvch merged 2 commits intoelastic:6.xfrom
kvch:backport_7991_6.x
Sep 3, 2018
Merged

Cherry-pick #7991 to 6.x: Add tag "truncated" to "log.flags" if incoming line is longer than configured limit#8165
kvch merged 2 commits intoelastic:6.xfrom
kvch:backport_7991_6.x

Conversation

@kvch
Copy link
Copy Markdown
Contributor

@kvch kvch commented Aug 30, 2018

Cherry-pick of PR #7991 to 6.x branch. Original message:

A new field is added to store the flags of an event named "log.flags".
If a message is truncated, "truncated" flag is added to the list.

Example event with "truncated" flag:

{
  "@timestamp": "2018-08-16T13:00:46.759Z",
  "@metadata": {
    "beat": "filebeat",
    "type": "doc",
    "version": "7.0.0-alpha1"
  },
  "host": {
    "name": "sleipnir"
  },
  "source": "/home/n/test.log",
  "offset": 33,
  "log": {
    "flags": [
       "truncated"
    ],
  },
  "message": "test line",
  "prospector": {
    "type": "log"
  },
  "input": {
    "type": "log"
  },
  "beat": {
    "hostname": "sleipnir",
    "version": "7.0.0-alpha1",
    "name": "sleipnir"
  }
}

Blocks #7997
Closes #7022

@kvch kvch added backport review in progress Pull request is currently in progress. blocked and removed review labels Aug 30, 2018
@kvch
Copy link
Copy Markdown
Contributor Author

kvch commented Aug 30, 2018

It is blocked by #8166

Comment thread CHANGELOG.asciidoc Outdated
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you double check these entries?

kvch and others added 2 commits August 31, 2018 09:51
…nfigured limit (elastic#7991)

A new field is added to store the flags of an event named "log.flags".
If a message is truncated, "truncated" flag is added to the list.

Example event with "truncated" flag:

{
  "@timestamp": "2018-08-16T13:00:46.759Z",
  "@metadata": {
    "beat": "filebeat",
    "type": "doc",
    "version": "7.0.0-alpha1"
  },
  "host": {
    "name": "sleipnir"
  },
  "source": "/home/n/test.log",
  "offset": 33,
  "log": {
    "flags": [
       "truncated"
    ],
  },
  "message": "test line",
  "prospector": {
    "type": "log"
  },
  "input": {
    "type": "log"
  },
  "beat": {
    "hostname": "sleipnir",
    "version": "7.0.0-alpha1",
    "name": "sleipnir"
  }
}

Closes elastic#7022
(cherry picked from commit 0884236)
@kvch kvch force-pushed the backport_7991_6.x branch from 93bc91a to 6c79028 Compare August 31, 2018 07:55
@kvch kvch added review and removed blocked in progress Pull request is currently in progress. labels Aug 31, 2018
@kvch
Copy link
Copy Markdown
Contributor Author

kvch commented Sep 3, 2018

jenkins test this

@kvch
Copy link
Copy Markdown
Contributor Author

kvch commented Sep 3, 2018

Failing tests are unrelated.

@kvch kvch merged commit 74ac00e into elastic:6.x Sep 3, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants