Dear All, I have a openstack HA environment deployed using fuel 5.1. Fuel master node collects all the node logs under /var/log/docker-logs/remote/ directory. I have installed Logstash on fuel master node. Here is Logstash.conf: http://paste.openstack.org/show/190985/ Here is rsyslog Template format: # cat /etc/rsyslog.d/00-remote.conf | grep Template # Templates $Template RemoteLog, "<%pri%>%timestamp% %hostname% %syslogtag%%msg:::sp-if-no-1st-sp%%msg%\n" $ActionFileDefaultTemplate RemoteLog Is there any grok pattern reference for fuel centralized logs? Thanks for your time. -- Thanks & Regards E-Mail: thefossgeek at gmail.com IRC: neophy Blog : http://lmohanphy.livejournal.com/ -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150309/e96ea97f/attachment.html>