yep,
i got this one solved.
thanks a lot
Search found 14 matches
- Mon Mar 09, 2015 11:08 am
- Forum: Nagios Log Server
- Topic: can't find reason for _grokparsefailure
- Replies: 9
- Views: 3421
- Mon Mar 09, 2015 5:37 am
- Forum: Nagios Log Server
- Topic: Modify Home view or build a Dashboard Overview
- Replies: 1
- Views: 739
Modify Home view or build a Dashboard Overview
Hi,
is it possible to modify the Home View or build an "Dashboard-Overview" (with a bigger list to select dashboards an queries)?
thanks in advance
Mike
is it possible to modify the Home View or build an "Dashboard-Overview" (with a bigger list to select dashboards an queries)?
thanks in advance
Mike
- Mon Mar 09, 2015 5:33 am
- Forum: Nagios Log Server
- Topic: can't find reason for _grokparsefailure
- Replies: 9
- Views: 3421
Re: can't find reason for _grokparsefailure
thanks a lot,
the hint towards multiple groks got me on the right way.
the hint towards multiple groks got me on the right way.
- Thu Mar 05, 2015 10:08 am
- Forum: Nagios Log Server
- Topic: can't find reason for _grokparsefailure
- Replies: 9
- Views: 3421
Re: can't find reason for _grokparsefailure
thanks. i now tested some configurations. is it possible to have a match-statement set a field to a constant (that's not in the message, but in the regex)? e.g. on first match set a field to "1" on second match to "2" match => [ 'message', '<190>%{DATA:timestamp} %{DATA:fw_node} ...
- Mon Mar 02, 2015 9:58 am
- Forum: Nagios Log Server
- Topic: can't find reason for _grokparsefailure
- Replies: 9
- Views: 3421
Re: can't find reason for _grokparsefailure
hi,
you mean a custom syslog-input with another type like:
syslog {
type => 'mysyslog'
port => 5545
}
or something like
tcp {
type => 'mysyslog'
port => 5545
}
?
thanks in advance
you mean a custom syslog-input with another type like:
syslog {
type => 'mysyslog'
port => 5545
}
or something like
tcp {
type => 'mysyslog'
port => 5545
}
?
thanks in advance
- Mon Mar 02, 2015 4:56 am
- Forum: Nagios Log Server
- Topic: can't find reason for _grokparsefailure
- Replies: 9
- Views: 3421
can't find reason for _grokparsefailure
Hi, we keep getting a _grokparsefailure on our syslog-messages from our firewall. We checked our grok-match on http://grokconstructor.appspot.com/do/match#result In NLS the events get parsed correctly, fields get set but we keep getting "_grokparsefailure". Maybe someone finds an error we ...
- Mon Mar 02, 2015 4:23 am
- Forum: Nagios Log Server
- Topic: Filter not working (Windows, im_file, acces.log)
- Replies: 9
- Views: 4063
Re: Filter not working (Windows, im_file, acces.log)
thanks for your reply. the problem wasn't the filter, but our instances in the NLS-cluster were not processing the events identically. When sent to "server1" the filter worked right, on "server2" didn't get applied at all. I re-setup NLS with a single instance and don't have thes...
- Tue Feb 24, 2015 4:26 am
- Forum: Nagios Log Server
- Topic: Filter not working (Windows, im_file, acces.log)
- Replies: 9
- Views: 4063
Re: Filter not working (Windows, im_file, acces.log)
Hi again, unfortunately our filters still ain't working as expected. they don't seem to be triggered reliable. events of the same type from another host get filtered correctly. (and i expect that these examples eventually get filtered correctly after a while without further action) Anybody has a hin...
- Thu Feb 19, 2015 2:22 am
- Forum: Nagios Log Server
- Topic: Questions: API Documentation and Multiline events
- Replies: 3
- Views: 1982
Re: Questions: API Documentation and Multiline events
thanks a lot.
this should get us running.
this should get us running.
- Wed Feb 18, 2015 6:16 am
- Forum: Nagios Log Server
- Topic: Questions: API Documentation and Multiline events
- Replies: 3
- Views: 1982
Questions: API Documentation and Multiline events
Hi, i got a couple of questions regarding NLS: 1. Is there any documentation about the external API access? (can't find anything in the help section) 2. Can anyone give me a hint, how to import log files with multiline-events? e.g.: we need to import Tomcat logs from some windows machines (via nxlog...