Graylog: update content pack (grock pattern)

[bisgaard-itis]

What do these changes do?

• Since the async logger went in (⚗️Introduce asynchronous logging facilities (🚨) osparc-simcore#8064) we cannot search for fields in Graylog (e.g. the trace id) because one of the GROK patterns were wrong. There were two symptoms I observed when searching for fields in Graylog:
  • Some fields could not be searched (e.g. the log_trace_id)
  • Some fields were parsed incorrectly (e.g. the log_span_id).
• This PR fixes that.

Related issue/s

Related PR/s

• ⚗️Introduce asynchronous logging facilities (🚨) osparc-simcore#8064
• 🎨 Tracing: instrument logs and ensure traces are propagated through asyncio.Queues osparc-simcore#6857

Checklist

• I tested and it works

[matusdrobuliak66]

Thanks

[YuryHrytsuk]

@bisgaard-itis did you rewrite the whole file? I thought I could review on line basis but this seems like a new file with a few old lines preserved

[bisgaard-itis]

@bisgaard-itis did you rewrite the whole file? I thought I could review on line basis but this seems like a new file with a few old lines preserved

The file is generated from Graylog with the help of @matusdrobuliak66 😄. So yes, the entire file is new.

[YuryHrytsuk]

@bisgaard-itis could you update PR's decsription and link related PRs and issues? Also describe changes you did (bug fixes, new fields?) This is important for traceability. Otherwise, in 6 months we would stumble upon this PR and have no clue what's what.

Thanks!

[bisgaard-itis]

@bisgaard-itis could you update PR's decsription and link related PRs and issues? Also describe changes you did (bug fixes, new fields?) This is important for traceability. Otherwise, in 6 months we would stumple upon this PR and have no clue what's what.

Thanks!

Done! Thanks

[YuryHrytsuk]

Thanks 🙏

Maybe linking tracing PR / Issue would also make sense (or whatever PR introduced log_trace_* fields) 🙏

[bisgaard-itis]

Thanks 🙏

Maybe linking tracing PR / Issue would also make sense (or whatever PR introduced log_trace_* fields) 🙏

Done