-
Notifications
You must be signed in to change notification settings - Fork 31
/
foreman.yml
162 lines (135 loc) · 4.1 KB
/
foreman.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
namespace:
name: foreman
type: group
description: >
Contains common fields specific to Foreman / Satellite 6 deployment.
fields:
- name: app
type: keyword
description: >
Application which created the log event, one of: foreman, foreman-proxy, dynflow, candlepin or pulp.
- name: logger
type: keyword
description: >
Ruby on Rails logger name, one of: app, sql, permissions, audit, templates, ldap, telemetry, notifications or blob. Loggers can be individually enabled or disabled. For more info see Foreman's setting.yaml file.
- name: user_login
type: keyword
description: >
User login name who created the event.
- name: user_admin
type: long
description: >
Effective user (0) or super administrator (1).
- name: org_id
type: long
description: >
Organization database ID which created the event, if set.
- name: loc_id
type: long
description: >
Location database ID which created the event, if set.
- name: org_name
type: keyword
description: >
Organization name which created the event, if set.
- name: loc_name
type: keyword
description: >
Location name which created the event, if set.
- name: org_label
type: keyword
description: >
Organization label which created the event, if set.
- name: loc_label
type: keyword
description: >
Location label which created the event, if set.
- name: remote_ip
type: ip
description: >
IPv4 address of remote client which created the event, if available.
- name: request
type: keyword
description: >
format: [a-zA-Z][a-zA-Z0-9-]{0,61}[a-zA-Z0-9]
UUID of web request for events created in web request context.
- name: session
type: keyword
description: >
format: [a-zA-Z][a-zA-Z0-9-]{0,61}[a-zA-Z0-9]
UUID of web session for events created in web request context. For session-less requests (e.g. API call) new session UUID is generated every time.
- name: audit
type: group
description: >
Audit related data (who, what, when).
fields:
- name: action
type: keyword
description: >
Audit action: create, update, delete
- name: type
type: keyword
description: >
Record type (Host, Subnet etc).
- name: id
type: long
description: >
Database ID of audited record
- name: attribute
type: keyword
description: >
Attribute which changed
- name: field_old
type: text
doc_values: false
description: >
Attribute value before the change
- name: field_new
type: text
doc_values: false
description: >
Attribute value the change
- name: exception
type: group
description: >
Contains common fields specific to Ruby (Ruby on Rails) exceptions.
fields:
- name: message
type: text
doc_values: false
description: >
Exception message
- name: class
type: keyword
description: >
Ruby exception class.
- name: backtrace
type: text
doc_values: false
description: >
Full exception backtrace (multiline text).
- name: template
type: group
description: >
Contains common fields specific to template renderers. Events only appear when "blob" logger is enabled. Rendered template contents is part of log message.
fields:
- name: name
type: keyword
description: >
Template name which was used to render content.
- name: digest
type: keyword
description: >
SHA256 of the rendered template contents.
- name: host_name
type: keyword
description: >
Host name which was associated with the template, if present.
- name: host_id
type: long
description: >
Host database ID which was associated with the template, if present.
- name: context
type: keyword
description: >
This field is deprecated