new logs config added

charts/values.yaml

@@ -123,12 +123,12 @@ logstash:
       filter: |-
         filter {
           ## removing ELK logs
-          if [kubernetes][container][name] == "filebeat" or [kubernetes][container][name] == "metricbeat" or [kubernetes][container][name] == "logstash" or [kubernetes][container][name] == "heartbeat"  or [kubernetes][container][name] == "kibana" or [kubernetes][container][name] == "elasticsearch" {
+          if [kubernetes][container][name] in ["filebeat", "metricbeat", "logstash", "heartbeat", "kibana", "elasticsearch"] {
             drop { }
           }    
           
           # Technical logs 
-          if [kubernetes][container][name] == "sd-creation-wizard-api" or [kubernetes][container][name] == "signer" 	or [kubernetes][container][name] == "sd-creation-wizard-api-validation"   {
+          if [kubernetes][container][name] in ["sd-creation-wizard-api", "signer", "sd-creation-wizard-api-validation"] {
             json {
                     source => "message"
                     skip_on_invalid_json => true
@@ -137,7 +137,7 @@ logstash:
                 }
           }
           # Business logs
-          if [kubernetes][container][name] == "simpl-cloud-gateway" or [kubernetes][container][name] == "tls-gateway" {
+          if [kubernetes][container][name] in  ["simpl-cloud-gateway", "tls-gateway"] {
             json {
                     source => "message"
                     skip_on_invalid_json => true
@@ -179,7 +179,10 @@ logstash:
           }
 
           # Onboaring technical logs 
-          if [kubernetes][container][name] == "users-roles" or [kubernetes][container][name] == "identity-provider" or [kubernetes][container][name] == "onboarding" or [kubernetes][container][name] == "security-attributes-provider"  or [kubernetes][container][name] == "xsfc-advsearch-be" or [kubernetes][container][name] == "contract-consumption-be-api" {
+          if [kubernetes][container][name] in ["users-roles", "identity-provider", "onboarding", 
+                                     "security-attributes-provider", "xsfc-advsearch-be", 
+                                     "contract-consumption-be-api", "authentication-provider", 
+                                     "contract-consumer", "contract-dataprovider"] {  
             json {
                     source => "message"
                     skip_on_invalid_json => true
@@ -407,7 +410,13 @@ filebeat:
                   - equals: 
                       kubernetes.container.name: "xsfc-advsearch-be"
                   - equals:
-                      kubernetes.container.name: "contract-consumption-be-api"                 
+                      kubernetes.container.name: "contract-consumption-be-api"
+                  - equals:
+                      kubernetes.container.name: "authentication-provider"
+                  - equals:
+                      kubernetes.container.name: "contract-consumer"
+                  - equals:
+                      kubernetes.container.name: "contract-dataprovider"
               config:
                 - type: container
                   paths: