From 990244e62a9bb234bb9de1e7dde52775ffe14658 Mon Sep 17 00:00:00 2001 From: Iris Lau Date: Wed, 5 Jul 2023 15:22:53 +0100 Subject: [PATCH] Fix dropped logs due to incorrect error field type Kibana validates log lines by index patterns and "error" is supposed to be an object. Since error is a string in logstaher's world we are renaming it to "message" which will be accepted as string. Co-authored-by: Neamah Al-Selwi Co-authored-by: Tuomas Nylund Co-authored-by: Laura Ghiorghisor --- lib/govuk_app_config/govuk_json_logging.rb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/lib/govuk_app_config/govuk_json_logging.rb b/lib/govuk_app_config/govuk_json_logging.rb index 3fab414..a1a4cf6 100644 --- a/lib/govuk_app_config/govuk_json_logging.rb +++ b/lib/govuk_app_config/govuk_json_logging.rb @@ -50,6 +50,11 @@ def self.configure # Elasticsearch index expect source to be an object and logstash defaults # source to be the host IP address causing logs to be dropped. Rails.application.config.logstasher.source = {} + # Elasticsearch index expect error to be an object and logstash defaults + # error to be a string causing logs to be dropped. + Rails.application.config.logstasher.field_renaming = { + error: :message, + } Rails.application.config.logstasher.logger = Logger.new( $stdout,