{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/519","labels_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/519/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/519/comments","events_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/519/events","html_url":"https://github.com/cloudfoundry/cf-release/issues/519","id":45289639,"number":519,"title":"Need ability to filter logs that are being relayed from logs vm into splunk","user":{"login":"paramveer","id":121330,"avatar_url":"https://avatars.githubusercontent.com/u/121330?v=3","gravatar_id":"","url":"https://api.github.com/users/paramveer","html_url":"https://github.com/paramveer","followers_url":"https://api.github.com/users/paramveer/followers","following_url":"https://api.github.com/users/paramveer/following{/other_user}","gists_url":"https://api.github.com/users/paramveer/gists{/gist_id}","starred_url":"https://api.github.com/users/paramveer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paramveer/subscriptions","organizations_url":"https://api.github.com/users/paramveer/orgs","repos_url":"https://api.github.com/users/paramveer/repos","events_url":"https://api.github.com/users/paramveer/events{/privacy}","received_events_url":"https://api.github.com/users/paramveer/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2014-10-08T20:03:46Z","updated_at":"2015-02-02T08:23:19Z","closed_at":null,"body":"We have set up relay of CF system logs into splunk. However, the volume of logs is turning out to be very large. The logs do not always publish a log level (DEBUG/INFO) and there is currently no way to filter down the logs being sent to splunk. Could we please get the following resolved:\r\n\r\n1. All logs should report a log level in the same\r\n2. CF should allow controlling what log level is relayed to external log systems like splunk. Having an entry in the manifest would be best"},"comment":{"url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/comments/72420687","html_url":"https://github.com/cloudfoundry/cf-release/issues/519#issuecomment-72420687","issue_url":"https://api.github.com/repos/cloudfoundry/cf-release/issues/519","id":72420687,"user":{"login":"shinji62","id":4757816,"avatar_url":"https://avatars.githubusercontent.com/u/4757816?v=3","gravatar_id":"","url":"https://api.github.com/users/shinji62","html_url":"https://github.com/shinji62","followers_url":"https://api.github.com/users/shinji62/followers","following_url":"https://api.github.com/users/shinji62/following{/other_user}","gists_url":"https://api.github.com/users/shinji62/gists{/gist_id}","starred_url":"https://api.github.com/users/shinji62/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shinji62/subscriptions","organizations_url":"https://api.github.com/users/shinji62/orgs","repos_url":"https://api.github.com/users/shinji62/repos","events_url":"https://api.github.com/users/shinji62/events{/privacy}","received_events_url":"https://api.github.com/users/shinji62/received_events","type":"User","site_admin":false},"created_at":"2015-02-02T08:23:18Z","updated_at":"2015-02-02T08:23:18Z","body":"Are you using splunk Universal forwarder ?  If yes, you can do mostly whatever you want on it.\r\n"}}