Merge pull request #132 from cloud-gov/cloudwatch-upgrades

Cloudwatch upgrades including correcting end point

jobs/ingestor_cloudwatch/templates/config/input_and_output.conf.erb

@@ -4,7 +4,7 @@ input
   {
     log_group_prefix => true
     interval => 1
-    start_position => 86400
+    start_position => end
     <% if_p("logstash_ingestor.cloudwatch.prefix") do |prefix_list| %>
     log_group => "<%= prefix_list %>"
     <% end %>
@@ -33,6 +33,11 @@ filter
         remove_field => ["[cloudwatch_logs][tags][PlanGUID]"]
         remove_field => ["[cloudwatch_logs][tags][ServiceGUID]"]
     }
+    truncate {
+            fields => ["message"]
+            add_tag => [ "_logtrimmed" ]
+            length_bytes => 32765
+    }
 }
 
 <%