[16:57:59] <paravoid>	 hey team - I have a conflict for our meeting and I'll have to skip unfortunately
[16:58:43] <paravoid>	 I took a glance at the agenda and it looks like there isn't anything that requires me per se, but let me know if I misunderstood
[17:01:04] <moritzm>	 ack
[17:01:17] <volans>	 ack
[17:45:31] <XioNoX>	 Re the iptables dashboard, a ton of servers are trying to reach phab1003 on port 22280/tcp
[17:45:38] <XioNoX>	 so I think something is missconfigured
[17:46:02] <XioNoX>	 dunno if this link works: https://logstash.wikimedia.org/goto/23faeb7f40dc1205cb58007b65020c68
[17:46:38] <XioNoX>	 who usualy manages phab?
[17:47:06] <paravoid>	 just finished with my other meeting, but I guess you wrapped this up early :)
[17:48:54] <volans>	 yes
[17:49:31] <effie>	 XioNoX: ping mutante on -serviceops
[17:50:45] <mark>	 XioNoX: ping
[17:50:50] <mark>	 wanted to sync up about next week if you have time
[19:02:21] <XioNoX>	 was in a meeting, following up via PM
[19:19:29] <XioNoX>	 herron: what's the magic trick to make a new field in kibana indexed?
[19:20:05] <herron>	 it depends a little bit on the source but generally it’s updating a filter or template along the way
[19:20:14] <herron>	 what type of log is it?
[19:20:48] <XioNoX>	 herron: the new source/dest ports :)
[19:20:50] <herron>	 or are you talking about index mappings within kibana
[19:20:58] <XioNoX>	 yeah I can't filter on them
[19:21:05] <XioNoX>	 but I do see them
[19:21:10] <herron>	 gotcha, sure
[19:21:34] <herron>	 better now?
[19:22:23] <XioNoX>	 perfecto, thx!
[19:22:37] <herron>	 sweet! np
[20:16:35] <XioNoX>	 https://logstash.wikimedia.org/app/kibana#/dashboard/AW5v7YTUarkxubcmAwPB?_g=h@97fe121 slightly more useful
[20:18:47] <XioNoX>	 eg, there are lot of mw hosts trying to reach echostore.svc.eqiad.wmnet. on port 8082/tcp
[20:31:24] <cdanis>	 hah, that's probably worth serviceops knowing about
[20:37:35] <XioNoX>	 yeah I'm opening a bunch of tasks