Re: Incomplete Logs
Posted: Sat Apr 13, 2019 6:48 pm
@cdienger I have shared the logstash config with you. Did you find anything? If parsing is issue, then how some times same logs comes to NLS but some times not?
The configuration looks good. And what you're able to find in the dashboard would depend on the time frame you're looking at and if it contains bad data.
If data comes in on the syslog input then it must comply with the rfc standard.