logstash.o.o isn't treating stacktraces as a single line

[Matt Riedemann]

Given:

http://logs.openstack.org/85/197185/10/gate/gate-tempest-dsvm-cells/7ef1949/logs/screen-n-cpu.txt.gz?level=TRACE#_2015-07-14_16_39_06_862

I wanted to find a query for that in logstash using the method and error, like:

message:"_build_networks_for_instance" AND message:"InstanceUpdateConflict" AND tags:"screen-n-cpu.txt"

But that doesn't work because logstash is doing a pattern match on this for multiline:

    multiline {
      negate => false
      pattern => "^%{TIMESTAMP_ISO8601}%{SPACE}%{NUMBER}?%{SPACE}?TRACE"
      what => "previous"
      stream_identity => "%{host}.%{filename}"
    }

But with this change to oslo.log:

https://review.openstack.org/#/c/166537/

The TRACE entries are now ERROR entries.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/201765

[Matt Riedemann (mriedem)]

Here is the proposed fix to system-config: https://review.openstack.org/#/c/201777/

[OpenStack Infra (hudson-openstack)]

Change abandoned by Matt Riedemann (<email address hidden>) on branch: master
Review: https://review.openstack.org/201765
Reason: Updating system-config instead:

https://review.openstack.org/#/c/201777/