Merge pull request #82 from cloud-gov/filter

rds Filter

jobs/ingestor_cloudwatch/templates/config/input_and_output.conf.erb

@@ -12,6 +12,23 @@ input
   }
 }
 
+filter
+{
+    mutate {
+        rename => {"[cloudwatch_logs][tags][environment]"=>"environment"}
+        rename => {"[cloudwatch_logs][tags][OrganizationGUID]"=>"[@cf][org_id]"}
+        rename => {"[cloudwatch_logs][tags][SpaceGUID]"=>"[@cf][space_id]"}
+        rename => {"[cloudwatch_logs][tags][Organizationname]"=>"[@cf][org]"}
+        remove_field => ["[cloudwatch_logs][tags][Createdat]"]
+        remove_field => ["[cloudwatch_logs][tags][Updatedat]"]
+        rename => {"[cloudwatch_logs][tags][InstanceGUID]"=>"[@cf][service_instance_id]"}
+        rename => {"[cloudwatch_logs][tags][Serviceofferingname]"=>"[@cf][service_offering]"}
+        rename => {"[cloudwatch_logs][tags][Serviceplanname]"=>"[@cf][service_plan]"}
+        rename => {"[cloudwatch_logs][tags][broker]"=>"broker"}
+        remove_field => ["[cloudwatch_logs][tags][client]"]
+
+    }
+}
 
 <%
   es_output_hosts = nil