We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Graylog output plugin send empty string in short_message variable. In source code (https://github.com/influxdata/telegraf/blob/master/plugins/outputs/graylog/graylog.go#L216): m["short_message"] = " "
m["short_message"] = " "
This leads to error kind:
2016-11-14T18:43:00.203+03:00 DEBUG [DecodingProcessor] Dropping incomplete message RawMessage{id=058d2ca0-aa81-11e6-8b1d-fa163e114f3b, journalOffset=3910, codec=gelf, payloadSize=137, timestamp=2016-11-14T15:43:00.202Z} on input <5829c1620b85885f77706457>. Parsed fields: [{total=0, in=0, name=swap, used_percent=0, _id=058d53b0-aa81-11e6-8b1d-fa163e114f3b, source=<HOSTNAME>, used=0, message=, free=0, timestamp=2016-11-14T15:43:00.000Z, out=0}]
As workaround, i'm recompile telegraf with: m["short_message"] = "telegraf" and all issues decided.
m["short_message"] = "telegraf"
[[inputs.swap]] [[outputs.graylog]] servers = ["127.0.0.1:12201"]
the easiest way to reproduce error is:
normal work: bash# echo -e '{"version": "1.1","host":"example.org","short_message":"Short message","full_message":"Full_msg","level":1,"_user_id":9001,"_some_info":"foo","_some_env_var":"bar"}\0' | nc -w 1 -u 127.0.0.1 12201 not work with error dropping incomplete message: bash# echo -e '{"version": "1.1","host":"example.org","short_message":" ","full_message":"Full_msg","level":1,"_user_id":9001,"_some_info":"foo","_some_env_var":"bar"}\0' | nc -w 1 -u 127.0.0.1 12201
Data should be correctly parsed
Data is not parsed correctly and discarded
The text was updated successfully, but these errors were encountered:
what version of graylog & telegraf are you using?
Sorry, something went wrong.
I tested Graylog v2.1.2 & Telegraf 1.0.1
Graylog output should set short_message field
5f06bd2
closes #2045
117b433
closes influxdata#2045
c4c13c4
sparrc
Successfully merging a pull request may close this issue.
Bug report
Graylog output plugin send empty string in short_message variable. In source code (https://github.com/influxdata/telegraf/blob/master/plugins/outputs/graylog/graylog.go#L216):
m["short_message"] = " "
This leads to error kind:
2016-11-14T18:43:00.203+03:00 DEBUG [DecodingProcessor] Dropping incomplete message RawMessage{id=058d2ca0-aa81-11e6-8b1d-fa163e114f3b, journalOffset=3910, codec=gelf, payloadSize=137, timestamp=2016-11-14T15:43:00.202Z} on input <5829c1620b85885f77706457>. Parsed fields: [{total=0, in=0, name=swap, used_percent=0, _id=058d53b0-aa81-11e6-8b1d-fa163e114f3b, source=<HOSTNAME>, used=0, message=, free=0, timestamp=2016-11-14T15:43:00.000Z, out=0}]
As workaround, i'm recompile telegraf with:
m["short_message"] = "telegraf"
and all issues decided.
Relevant telegraf.conf:
Steps to reproduce:
the easiest way to reproduce error is:
Expected behavior:
Data should be correctly parsed
Actual behavior:
Data is not parsed correctly and discarded
The text was updated successfully, but these errors were encountered: