We are using an output filter on our senders that looks like
output {
tcp {
host => "log.host"
port => 2009
mode => "client"
codec => "json_lines"
workers => 1
}
}
and on the receiver:
input {
tcp {
mode => "server"
port => 2009
codec => "json"
}
}
output {
file {
path => "/path/%{lm-host}/%{path}"
codec => "json"
message_format => "%{message}"
workers => 1
}
}
I would like to append a json structure to end of each message that gets written to our log files without changing the rest of the message. Basically, something like
this is a log message. { "key1": "value1", "key2": "value2" }
The key/value pairs would be added on the sender and ideally, we could additional pairs on the sender without further modifications on the receiver.
Thanks.