Search found 14 matches

by McCriddle
Mon Mar 09, 2015 11:08 am
Forum: Nagios Log Server
Topic: can't find reason for _grokparsefailure
Replies: 9
Views: 3421

Re: can't find reason for _grokparsefailure

yep,

i got this one solved.

thanks a lot
by McCriddle
Mon Mar 09, 2015 5:37 am
Forum: Nagios Log Server
Topic: Modify Home view or build a Dashboard Overview
Replies: 1
Views: 739

Modify Home view or build a Dashboard Overview

Hi,

is it possible to modify the Home View or build an "Dashboard-Overview" (with a bigger list to select dashboards an queries)?

thanks in advance
Mike
by McCriddle
Mon Mar 09, 2015 5:33 am
Forum: Nagios Log Server
Topic: can't find reason for _grokparsefailure
Replies: 9
Views: 3421

Re: can't find reason for _grokparsefailure

thanks a lot,

the hint towards multiple groks got me on the right way.
by McCriddle
Thu Mar 05, 2015 10:08 am
Forum: Nagios Log Server
Topic: can't find reason for _grokparsefailure
Replies: 9
Views: 3421

Re: can't find reason for _grokparsefailure

thanks. i now tested some configurations. is it possible to have a match-statement set a field to a constant (that's not in the message, but in the regex)? e.g. on first match set a field to "1" on second match to "2" match => [ 'message', '<190>%{DATA:timestamp} %{DATA:fw_node} ...
by McCriddle
Mon Mar 02, 2015 9:58 am
Forum: Nagios Log Server
Topic: can't find reason for _grokparsefailure
Replies: 9
Views: 3421

Re: can't find reason for _grokparsefailure

hi,

you mean a custom syslog-input with another type like:

syslog {
type => 'mysyslog'
port => 5545
}

or something like

tcp {
type => 'mysyslog'
port => 5545
}


?

thanks in advance
by McCriddle
Mon Mar 02, 2015 4:56 am
Forum: Nagios Log Server
Topic: can't find reason for _grokparsefailure
Replies: 9
Views: 3421

can't find reason for _grokparsefailure

Hi, we keep getting a _grokparsefailure on our syslog-messages from our firewall. We checked our grok-match on http://grokconstructor.appspot.com/do/match#result In NLS the events get parsed correctly, fields get set but we keep getting "_grokparsefailure". Maybe someone finds an error we ...
by McCriddle
Mon Mar 02, 2015 4:23 am
Forum: Nagios Log Server
Topic: Filter not working (Windows, im_file, acces.log)
Replies: 9
Views: 4063

Re: Filter not working (Windows, im_file, acces.log)

thanks for your reply. the problem wasn't the filter, but our instances in the NLS-cluster were not processing the events identically. When sent to "server1" the filter worked right, on "server2" didn't get applied at all. I re-setup NLS with a single instance and don't have thes...
by McCriddle
Tue Feb 24, 2015 4:26 am
Forum: Nagios Log Server
Topic: Filter not working (Windows, im_file, acces.log)
Replies: 9
Views: 4063

Re: Filter not working (Windows, im_file, acces.log)

Hi again, unfortunately our filters still ain't working as expected. they don't seem to be triggered reliable. events of the same type from another host get filtered correctly. (and i expect that these examples eventually get filtered correctly after a while without further action) Anybody has a hin...
by McCriddle
Thu Feb 19, 2015 2:22 am
Forum: Nagios Log Server
Topic: Questions: API Documentation and Multiline events
Replies: 3
Views: 1982

Re: Questions: API Documentation and Multiline events

thanks a lot.

this should get us running.
by McCriddle
Wed Feb 18, 2015 6:16 am
Forum: Nagios Log Server
Topic: Questions: API Documentation and Multiline events
Replies: 3
Views: 1982

Questions: API Documentation and Multiline events

Hi, i got a couple of questions regarding NLS: 1. Is there any documentation about the external API access? (can't find anything in the help section) 2. Can anyone give me a hint, how to import log files with multiline-events? e.g.: we need to import Tomcat logs from some windows machines (via nxlog...