removed type= lumberjack from the lumberjack input definition
testing SYSLOGLINE in indexer-filter
reverting type = lumberjack
testing adding tags and fields
attempting to add tags from SYSLOGLINE
syntax SYSLOGLINE
working on parsing /var/log/messages in logstash
in theory grok pattern should add the fields without needing add_field statements
groking syslog
groking syslog
groking syslog turned on dumping debug
groking syslog
groking syslog
groking syslog
groking syslog
groking syslog
attempting multiline match on puppet runs by program name and pid
another multiline attempt
removing multiline filter
adding statsd test output