[15:28:34] Is it possible to add additional opensearch tags to logs ingested via rsyslog? [15:30:06] jhathaway: check out puppet repo modules/profile/files/logstash/filters if you haven't already [15:30:34] thanks, looking... [15:30:35] although I'm not sure if it's more preferred to edit the logstash ingest config, or to edit the rsyslog output config [20:25:25] FIRING: SystemdUnitFailed: rsync-vopsbot-sync-db.service on alert2002:9100 - https://wikitech.wikimedia.org/wiki/Monitoring/check_systemd_state - https://grafana.wikimedia.org/d/g-AaZRFWk/systemd-status - https://alerts.wikimedia.org/?q=alertname%3DSystemdUnitFailed [20:26:00] ^ on it. [21:49:48] FIRING: PuppetFailure: Puppet has failed on alert1002:9100 - https://puppetboard.wikimedia.org/nodes?status=failed - https://grafana.wikimedia.org/d/yOxVDGvWk/puppet - https://alerts.wikimedia.org/?q=alertname%3DPuppetFailure