Nagios Support Forum

The Nagios Logserver frontend doesn't display XML messages properly. When you click on RAW view, it is displayed properly. It looks like the frontend can't cope with some brackets properly < >

Raw message:
{
"_index": "logstash-2015.09.08",
"_type": "lumberjack",
"_id": "AU-riwjscTCWuJTmrCj-",
"_score": null,
"_source": {
"message": "2015-09-08T06:00:53.184Z;UIT;PUB-managedServer-1;509080800525100019;1041;<?xml version=\"1.0\" encoding=\"UTF-8\"?><trgs><xid>XMLGEN040823</xid><tid>20150908080053</tid><sta>LEDN</sta><pdt>20150908</pdt><ptd>0800</ptd><psc>53</psc><psr/><pst>Leiden C.</pst><tsp/><trg stn=\"LEDN\" trn=\"2214\" sts=\"I\"><stn>LEDN</stn><trn>2214</trn><sts>I</sts><ved>20150908</ved><ver>07:42</ver><vvd>20150908</vvd><vvt>07:47</vvt><vtr>5</vtr><vta>5</vta><ein>Amsterdam C.</ein><spr>4a</spr><spp>4a</spp><srt>Intercity</srt><via>HAD,HLM,ASS</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"112716\" sts=\"I\"><stn>LEDN</stn><trn>112716</trn><sts>I</sts><ved>20150908</ved><ver>07:45</ver><vvd>20150908</vvd><vvt>08:01</vvt><vtr>16</vtr><vta>15</vta><ein>Den Haag C.</ein><spr>8b</spr><spp>8b</spp><srt>Intercity</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"6312\" sts=\"I\"><stn>LEDN</stn><trn>6312</trn><sts>I</sts><ved>20150908</ved><ver>07:46</ver><vvd>20150908</vvd><vvt>07:46</vvt><vtr>0</vtr><vta>0</vta><ein>Haarlem</ein><spr>4b</spr><spp>4b</spp><srt>Sprinter</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"8827\" sts=\"I\"><stn>LEDN</stn><trn>8827</trn><sts>I</sts><ved>20150908</ved><ver>07:52</ver><vvd>20150908</vvd><vvt>07:53</vvt><vtr>1</vtr><vta>0</vta><ein>Utrecht C.</ein><spr>1</spr><spp>1</spp><srt>Intercity</srt><via>APN</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"105716\" sts=\"I\"><stn>LEDN</stn><trn>105716</trn><sts>I</sts><ved>20150908</ved><ver>07:56</ver><vvd>20150908</vvd><vvt>07:56</vvt><vtr>0</vtr><vta>0</vta><ein>Den Haag C.</ein><spr>8b</spr><spp>8b</spp><srt>Sprinter</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"5716\" sts=\"I\"><stn>LEDN</stn><trn>5716</trn><sts>I</sts><ved>20150908</ved><ver>07:56</ver><vvd>20150908</vvd><vvt>07:56</vvt><vtr>0</vtr><vta>0</vta><ein>Den Haag C.</ein><spr>8b</spr><spp>8b</spp><srt>Sprinter</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"2116\" sts=\"I\"><stn>LEDN</stn><trn>2116</trn><sts>I</sts><ved>20150908</ved><ver>07:57</ver><vvd>20150908</vvd><vvt>07:57</vvt><vtr>0</vtr><vta>0</vta><ein>Amsterdam C.</ein><spr>4b</spr><spp>4b</spp><srt>Intercity</srt><via>HAD,HLM,ASS</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"2627\" sts=\"I\"><stn>LEDN</stn><trn>2627</trn><sts>I</sts><ved>20150908</ved><ver>07:57</ver><vvd>20150908</vvd><vvt>08:00</vvt><vtr>3</vtr><vta>5</vta><ein>Lelystad C.</ein><spr>5b</spr><spp>5b</spp><srt>Intercity</srt><via>SHL,ASS,ASD,ALM</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"2129\" sts=\"I\"><stn>LEDN</stn><trn>2129</trn><sts>I</sts><ved>20150908</ved><ver>08:05</ver><vvd>20150908</vvd><vvt>08:05</vvt><vtr>0</vtr><vta>0</vta><ein>Den Haag C.</ein><spr>9b</spr><spp>9b</spp><srt>Intercity</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"2616\" sts=\"I\"><stn>LEDN</stn><trn>2616</trn><sts>I</sts><ved>20150908</ved><ver>08:05</ver><vvd>20150908</vvd><vvt>08:05</vvt><vtr>0</vtr><vta>0</vta><ein>Vlissingen</ein><spr>8b</spr><spp>8b</spp><srt>Intercity</srt><via>LAA,GV,DT,RTD</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"102616\" sts=\"I\"><stn>LEDN</stn><trn>102616</trn><sts>I</sts><ved>20150908</ved><ver>08:05</ver><vvd>20150908</vvd><vvt>08:47</vvt><vtr>42</vtr><vta>40</vta><ein>Vlissingen</ein><spr>8b</spr><spp>8b</spp><srt>Intercity</srt><via>LAA,GV,DT,RTD</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"5727\" sts=\"I\"><stn>LEDN</stn><trn>5727</trn><sts>I</sts><ved>20150908</ved><ver>08:06</ver><vvd>20150908</vvd><vvt>08:12</vvt><vtr>6</vtr><vta>5</vta><ein>Hilversum</ein><spr>5b</spr><spp>5b</spp><srt>Sprinter</srt><via>SHL,DVD,WP</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"19525\" sts=\"I\"><stn>LEDN</stn><trn>19525</trn><sts>I</sts><ved>20150908</ved><ver>08:08</ver><vvd>20150908</vvd><vvt>08:08</vvt><vtr>0</vtr><vta>0</vta><ein>Gouda</ein><spr>2</spr><spp>2</spp><srt>Sprinter</srt><via>APN</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"2216\" sts=\"I\"><stn>LEDN</stn><trn>2216</trn><sts>I</sts><ved>20150908</ved><ver>08:12</ver><vvd>20150908</vvd><vvt>08:12</vvt><vtr>0</vtr><vta>0</vta><ein>Amsterdam C.</ein><spr>4a</spr><spp>4a</spp><srt>Intercity</srt><via>HAD,HLM,ASS</via><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"718\" sts=\"I\"><stn>LEDN</stn><trn>718</trn><sts>I</sts><ved>20150908</ved><ver>08:15</ver><vvd>20150908</vvd><vvt>08:16</vvt><vtr>1</vtr><vta>0</vta><ein>Den Haag C.</ein><spr>8b</spr><spp>8b</spp><srt>Intercity</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg><trg stn=\"LEDN\" trn=\"6331\" sts=\"I\"><stn>LEDN</stn><trn>6331</trn><sts>I</sts><ved>20150908</ved><ver>08:15</ver><vvd>20150908</vvd><vvt>08:18</vvt><vtr>3</vtr><vta>5</vta><ein>Den Haag C.</ein><spr>9b</spr><spp>9b</spp><srt>Sprinter</srt><via/><hfd>Dumhfd</hfd><tks>000</tks><omg/><opg/><ger>1</ger><tot/><nar/><bui/><opm/><ops/></trg></trgs>",
"@version": "1",
"@timestamp": "2015-09-08T06:00:59.138Z",
"type": "lumberjack",
"file": "/var/log/weblogic/applications/AW5IPLUS/pub/log/PUB-LOG-PUB-managedServer-1-20150908-060046.581.csv",
"host": "adccaf.landelijk.ris",
"offset": "200902",
"sourcetype": "Appl-PUB",
"CorrelationID": "509080800525100019",
"ServerName": "PUB-managedServer-1",
"bericht_type": "UIT",
"trap": "1041",
"tags": [
"_grokparsefailure"
]
},
"sort": [
1441692059138,
1441692059138
]
}

The displayed message:
(see attachment)

It looks like your browser is interpreting those tags as actual HTML - I have verified this on my end and I'm currently working with a developer. For now, I hope that the 'raw' value will work for you. I'll update you as my testing progresses.