fields issues when using several paths

[driskell]

fields issues when using several paths

[sysmonk]

I've just noticed similar thing, although i wanted to blame this one on the file includes enhancement.
I've got log-courier config like this:

{
        "network": {
                "servers": [ "logstash2..." ],
                "ssl ca": "...",
                "timeout": 15,
                "reconnect": 10
        },
        "includes": [
                "/etc/log-courier.d/*.conf"
        ],
        "files": [
                {
                        "paths": [ "/var/log/mail.log" ],
                        "fields": { "type": "maillog1" }
                }
        ]
}

and then the files in the /etc/log-courier.d/ are:
test.conf:

[
                {
                        "paths": [ "/var/log/mail.log" ],
                        "fields": { "type": "maillog3" }
                }
]

test2.conf:

[
        {   
            "paths": [ "/tmp/php-errors" ],
            "fields": { "type": "php-errors" }
        }
]

test3.conf

[
                {
                        "paths": [ "/var/log/mail.log" ],
                        "fields": { "type": "maillog4" }
                }
]

I'd expect logs from /tmp/php-errors to have type: php-errors, but they have type: maillog4
If i remove test3.conf, the log will have type: php-errors

It sounds like it reads the last type and sets all the log events to that type.

[driskell]

Thanks for the report.

I've reproduced this and will fix it shortly. Sorry for the issue.

[driskell]

Hi - I pushed a fix for this to the develop branch. Let me know if this doesn't work for you.

[sysmonk]

looks to be working great! thanks!

[dsolsona]

Works like a charm 👍
Thanks!