Page 1 of 1

"Failed parsing date from"

Posted: Fri Oct 31, 2014 10:22 am
by judanssi
Hi!

I have installed Nagios Log Server and tried to configure Ubuntu server's rsyslog to send logs. Now I can see the error message in /var/log/logstash/logstash.log
"{:timestamp=>"2014-10-31T11:17:59.321000-0400", :message=>"Failed parsing date from field", :field=>"timestamp", :value=>"Oct 31 17:17:22", :exception=>java.lang.IllegalArgumentException: Invalid format: "Oct 31 17:17:22", :level=>:warn}"

And also the dashboard shows only message with timestamp and hostname. No actual message.

What have I done wrong? :D

Re: "Failed parsing date from"

Posted: Fri Oct 31, 2014 1:56 pm
by sreinhardt
Could you post an example of the log message you tried to parse, any input filters that are applied to the input, and any grock filters applied as well?