Merge pull request #644 from piyush-desai-ibm/GRD-90012

Submit changes for GRD-90012.
IBM · Dec 13, 2024 · 8894724 · 8894724
2 parents 1c45e67 + e685e7b
commit 8894724
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/...ash-filter-aurora-mysql-guardium/AuroraMysqlOverCloudwatchPackage/AuroraMysql/filter.conf b/...ash-filter-aurora-mysql-guardium/AuroraMysqlOverCloudwatchPackage/AuroraMysql/filter.conf
@@ -17,6 +17,7 @@ filter
             } else {
                mutate { gsub => ["originalSQL","[\\]",""]}
                mutate { add_field => {"Server_Hostname" => "%{account_id}_%{serverInstance}"} }
+               mutate {replace => { "serverInstance" => "%{account_id}:%{serverInstance}" }}
                auroramysqlguardiumpluginfilter {}
             }
 

diff --git a/filter-plugin/logstash-filter-aurora-mysql-guardium/auroraMysqlCloudwatch.conf b/filter-plugin/logstash-filter-aurora-mysql-guardium/auroraMysqlCloudwatch.conf
@@ -38,6 +38,7 @@ filter
             } else {
                mutate { gsub => ["originalSQL","[\\]",""]}
                mutate { add_field => {"Server_Hostname" => "%{account_id}_%{serverInstance}"} }
+               mutate {replace => { "serverInstance" => "%{account_id}:%{serverInstance}" }}
                auroramysqlguardiumpluginfilter {}
             }
 

diff --git a/filter-plugin/logstash-filter-aurora-mysql-guardium/auroraSQL-test-genertor.conf b/filter-plugin/logstash-filter-aurora-mysql-guardium/auroraSQL-test-genertor.conf
@@ -15,7 +15,7 @@ input{
 
 filter
 {
-        if [type] == "AuroraMysql" {
+        if [type] == "cloudwatch" {
             grok {
                 match => {
                   "message" => [
@@ -32,6 +32,7 @@ filter
             } else {
                mutate { gsub => ["originalSQL","[\\]",""]}
                mutate { add_field => {"Server_Hostname" => "%{account_id}_%{serverInstance}"} }
+               mutate {replace => { "serverInstance" => "%{account_id}:%{serverInstance}" }}
                auroramysqlguardiumpluginfilter {}
             }