{"action":"created","issue":{"url":"https://api.github.com/repos/logsearch/logsearch-for-cloudfoundry/issues/48","labels_url":"https://api.github.com/repos/logsearch/logsearch-for-cloudfoundry/issues/48/labels{/name}","comments_url":"https://api.github.com/repos/logsearch/logsearch-for-cloudfoundry/issues/48/comments","events_url":"https://api.github.com/repos/logsearch/logsearch-for-cloudfoundry/issues/48/events","html_url":"https://github.com/logsearch/logsearch-for-cloudfoundry/issues/48","id":90496911,"number":48,"title":"Dashboard  is RELP specific ","user":{"login":"bonzofenix","id":317403,"avatar_url":"https://avatars.githubusercontent.com/u/317403?v=3","gravatar_id":"","url":"https://api.github.com/users/bonzofenix","html_url":"https://github.com/bonzofenix","followers_url":"https://api.github.com/users/bonzofenix/followers","following_url":"https://api.github.com/users/bonzofenix/following{/other_user}","gists_url":"https://api.github.com/users/bonzofenix/gists{/gist_id}","starred_url":"https://api.github.com/users/bonzofenix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bonzofenix/subscriptions","organizations_url":"https://api.github.com/users/bonzofenix/orgs","repos_url":"https://api.github.com/users/bonzofenix/repos","events_url":"https://api.github.com/users/bonzofenix/events{/privacy}","received_events_url":"https://api.github.com/users/bonzofenix/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-06-23T21:37:29Z","updated_at":"2015-06-24T04:38:53Z","closed_at":null,"body":"Hi David,\r\n\r\nOur doppler stream logs though TCP; this sets the type of the log as __syslog__ instead of __relp__.\r\nThe [json file for the dasboards](https://github.com/logsearch/logsearch-for-cloudfoundry/blob/master/target/kibana4-dashboards.json) is relp specific.\r\nWould you accept a PR with the json file turned into an erb and a property for the ingestor-for-cloudfoundry that sets the protocol?\r\n\r\nPlease let us know so that we get to work right away.\r\n\r\nThanks\r\n\r\n@bonzofenix && @cloud-dude\r\n"},"comment":{"url":"https://api.github.com/repos/logsearch/logsearch-for-cloudfoundry/issues/comments/114725077","html_url":"https://github.com/logsearch/logsearch-for-cloudfoundry/issues/48#issuecomment-114725077","issue_url":"https://api.github.com/repos/logsearch/logsearch-for-cloudfoundry/issues/48","id":114725077,"user":{"login":"mrdavidlaing","id":227505,"avatar_url":"https://avatars.githubusercontent.com/u/227505?v=3","gravatar_id":"","url":"https://api.github.com/users/mrdavidlaing","html_url":"https://github.com/mrdavidlaing","followers_url":"https://api.github.com/users/mrdavidlaing/followers","following_url":"https://api.github.com/users/mrdavidlaing/following{/other_user}","gists_url":"https://api.github.com/users/mrdavidlaing/gists{/gist_id}","starred_url":"https://api.github.com/users/mrdavidlaing/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mrdavidlaing/subscriptions","organizations_url":"https://api.github.com/users/mrdavidlaing/orgs","repos_url":"https://api.github.com/users/mrdavidlaing/repos","events_url":"https://api.github.com/users/mrdavidlaing/events{/privacy}","received_events_url":"https://api.github.com/users/mrdavidlaing/received_events","type":"User","site_admin":false},"created_at":"2015-06-24T04:38:53Z","updated_at":"2015-06-24T04:38:53Z","body":"First, thanks for picking up on this error and starting a discussion.\r\n\r\nThere should be a simpler way to solve this problem by filtering the logs shown in the dashboard by something that isn't protocol specific.\r\n\r\nThe queries behind the CF dashboards use a high level filter: `_type:\"relp_cf\"`.  Looking at the [filters](https://github.com/logsearch/logsearch-for-cloudfoundry/blob/master/src/logstash-filters/snippets/vcap.conf#L43), I think all the logs we want can better be found by filtering for `tag:cloudfoundry_vcap`\r\n\r\nCould you try that approach first; and if it works, I'd happily accept a PR.\r\n\r\nTalking about PRs I'll need a signed [CLA](https://github.com/logsearch/licensing) before I can merge."}}