Hi guys,
I am trying to index a ProxySQL log file which looks like:
ProxySQL LOG QUERY: thread_id="25" username="blabla" schemaname=information_schema" client="10.206.119.24:62462" HID=1
server="backendserver.example:3306" starttime="2019-01-24 14:13:42.436497" endtime="2019-01-24 14:13:42.446705"
duration=10208us digest="0x3C740A905F66E34A"
SELECT * from example
ProxySQL LOG QUERY: thread_id="25" username="blabla" schemaname=information_schema" client="10.206.119.24:62462" HID=1
server="backendserver.example:3306" starttime="2019-01-24 14:13:42.436497" endtime="2019-01-24 14:13:42.446705"
duration=10208us digest="0x3C740A905F66E34A"
SELECT @@port
When i tried to add this log using add data, i selected event_breaker auto and time_prefix with "stattime", and everything was perfect
Then i tried it with props.conf:
[proxysql]
TIME_PREFIX = starttime
SHOULD_LINEMERGE = true
EVENT_BREAKER_ENABLED = true
In inputs.conf, I got sourcetype = proxysql
And it does not work also. Is it possible that even if I set it up properly the new settings won't apply to logs already indexed? Because i tried various combinations but they don't change. (the log file is static for now; it's not getting any data in so it's already been indexed)
Thanks!
↧