Nagios Support Forum

Hi,

Now we have java stack trace in our logs but infortunatly it appears in many entries and not in one.
I didn't found any kind of information in forum to grab java stack trace. But we found this page http://blog.tagged.com/2012/05/grabbing ... -logstash/
So can we modify directly logstash configuration file or there's an another way to grab java stack trace ?
Thanks in advance for your answers

You can edit inputs and filters directly in the Logserver web interface under the Administration -> Global Configuration menu.

I am having the same issue.
The multiline codec and filter are not working for me.

I have this in my standard input.

syslog {
type => 'syslog'
port => 5544
codec => multiline {
pattern => "^\s"
what => "previous"
}
}

I tried to put it in as a filter, no go either.

WHere are the conf files located?
I am using logserver 1.3.0

The configuration files are not going to help out here.

The configuration files will be wrote over by whatever is configured under Administration > Global > Global Configuration

The configuration files are located in the /usr/local/nagioslogserver/logstash/etc/conf.d directory.

Can you please describe the issue you are experiencing to us? Screenshots may help as well.

All the java stack trace info is being written on separate lines. I would like to have them on one line per Exception.

The doco for the multiline Filter and Codec are not very in depth.
I have tried to use both, creating a filter like the post above.
and adding it to the input like I pasted.

I don't want to edit them by hand, wanted to see if they were being written to, and they are not.
The 000_inputs.conf file does not get written to after I make a change and apply.
Neither did the filters one.

I guess I just want to know if my syntax is correct.
And if it is, how do I get it to be written to the conf file.

Yes, I applied the configuration changes in the GUI but that doesn't seem to be writing to the files.I can view it in the GUI. and it has my changes.
But it doesn't do what I would like it to do. (if it's doing anything)

Can you please update to the latest version of Nagios Log Server? There were some changes that were made to the apply configuration process. It should no longer allow you to apply an invalid configuration. Let me know what happens. Thanks!

I upgraded to 1.4.1.
No change.

I can verify, view, apply, save... no errors

Files are still not overwritten.

the changes are seen in the GUI.

No change in how the logs are collected.

What are the contents of the files in /usr/local/nagioslogserver/logstash/etc/conf.d/ ?

If there's an error it should not be able to apply in this version of LogServer.

Are you still getting _any_ logs in?