I'm using lumberjack to ship logs. Every type of logfiles get their own "type". In the shipper configuration i'm using:
The "type" field remains empty.
Even if i'm using other inputs with "type => 'foo'" the "type"-field is empty.
My fault, sorry!
Don't know what the problem is, but in logstash 1.2.0 any fields you set in lumberjack will work well in logstash; so you can set the event type in lumberjack without doing any of that mutate stuff like you may have needed in previous releases.
Human bug. In the process of changing the config for the new version i made a mistake with search/replace.