About sample_rate, we have decreased value = 0.02 because there were problems with ingestion of events and a team who is responsible for ELK recommended to do it.
We have apm-* index and I haven't found any labels with the same names.
The document for "transaction.id":"8348a855b458358d"
:
{
"_index": "logs-data_portals_us-000401",
"_type": "_doc",
"_id": "w7hZcncBjKsXx9WOTca5",
"_version": 1,
"_score": null,
"_source": {
"@timestamp": "2021-02-05T13:19:50.824Z",
"clgx_pcf_app": "ordermanager",
"port": 59798,
"syslog5424_msg": "{\"@timestamp\":\"2021-02-05T13:19:50.824Z\", \"log.level\": \"INFO\", \"message\":\"testing log\", \"service.name\":\"madl-ordermanager\",\"process.thread.name\":\"http-nio-8080-exec-1\",\"log.logger\":\"com.corelogic.gateway.ordermanager.rest.v1.TestController\",\"transaction.id\":\"8348a855b458358d\",\"trace.id\":\"2f8b12bab676151032d68dde7b34cf76\"}",
"log.level": "INFO",
"objectid": "tags@47450",
"log.logger": "com.corelogic.gateway.ordermanager.rest.v1.TestController",
"transaction.id": "8348a855b458358d",
"syslog_facility_code": 1,
"message": "testing log",
"process.thread.name": "http-nio-8080-exec-1",
"syslog_facility": "user-level",
"syslog5424_proc": "[APP/PROC/WEB/0]",
"clgx_pcf_space": "whitney",
"syslog_severity": "notice",
"@version": "1",
"type": "syslog",
"syslog_severity_code": 5,
"syslog5424_ver": "1",
"organization": {
"name": "data_portals_us"
},
"service.name": "madl-ordermanager",
"host": {
"name": "10.46.20.85"
},
"syslog5424_pri": "14",
"index": "logs-data_portals_us",
"labels": {
"application": "ordermanager",
"environment": "np",
"space": [
"whitney",
"data_portals_us"
],
"organization": "data_portals_us"
},
"trace.id": "2f8b12bab676151032d68dde7b34cf76",
"syslog5424_app": "31a7e8a9-7a81-4143-8daf-3af6b467c248"
},
"fields": {
"IP": [
"10.46.20.85"
],
"App_id": [
"31a7e8a9-7a81-4143-8daf-3af6b467c248"
],
"suricata.eve.timestamp": [
"2021-02-05T13:19:50.824Z"
],
"Host": [
"dataportalsus-dev.whitney.ordermanager"
],
"@timestamp": [
"2021-02-05T13:19:50.824Z"
],
"App_name": [
"ordermanager"
],
"Instance_id": [
"0"
]
},
"highlight": {
"transaction.id": [
"@kibana-highlighted-field@8348a855b458358d@/kibana-highlighted-field@"
]
},
"sort": [
1612531190824
]
}