Nagios Support Forum

Hi all, I need some help for to manage java exceptions (multiline message). I have one case in my filter which can detect if a message contains the word "at", which means that the current event is part of a java exception : grok { remove_tag => [ "_grokparsefailure" ] match => [ ...

Hi again, Everything works correctly now. I re-wrote the filter and I removed this part : (?:(\\u001b\[%{INT}m)+)%{TIME} which seems to wrong or not correctly understand by NLS but it worked well in https://grokdebug.herokuapp.com/. Anyway, thanks a lot for the time you spent and your help ! Quentin

Hi, Thanks a lot for your reply. Here the JSON view of the result : { "_index": "logstash-2014.12.22", "_type": "syslog", "_id": "4VD0yGeLQu2ikSfNrnBUhQ", "_score": null, "_source": { "message": "[Server:s...

Hi Brian, Thanks for your reply. Unfortunately, it didn't work, I still have the same output. Here the JSON output : { "_index": "logstash-2014.12.19", "_type": "%{server_name}", "_id": "oMX6jv8dTUWYmi21qEwdMw", "_score": null, &q...

Hi,

Thanks for your reply. Please find two screenshots from NLS with both JSON and table view of an event that should match. Note that there is some special characters (some console color code) added by Jboss.

Thanks in advance.

Hello, I have some issue when trying to replace some fields in NLS. Here an example of the log I try to parse : [Server:server-four] \u001b[0m\u001b[0m14:41:16,096 INFO [org.jboss.as.webservices] (ServerService Thread Pool -- 30) JBAS015537: Activating WebServices Extension\u001b[0m Here the filter ...