input {
  file {
    add_field => { "dimensions" => { "service" => "system" }}
    path => "/var/log/syslog"
    tags => ["syslog"]
  }
}

filter {
  if "syslog" in [tags] {
    multiline {
      negate => "true"
      pattern => "^%{SYSLOGTIMESTAMP}"
      what => "previous"
    }
  }
}

output {
  monasca_log_api {
    monasca_log_api_url => "" 
    keystone_api_url => ""
    project_name => ""
    username => ""
    password => ""
    user_domain_name => ""
    project_domain_name => ""
    dimensions => [ ]
  }
}