Page 1 of 1
German umlauts in Winevent logs
Posted: Mon Jan 27, 2025 8:56 am
by Ajakob233
Hello.
we are at the Moment evaluting Nagios for our Usecases.
For Testing i just added some Maschines Switches etc. for Testing.
I came in to one small Problem.
Most of our Windows Server are German -> input errors where solved adding Codepage 850 in input conf for winevent.
Now the logs are working but German Special Umlauts (äüö) are not working properly.
first should be "für", second "ursprüngliche"
Screenshot 2025-01-27 145412.png
abr Alex
Re: German umlauts in Winevent logs
Posted: Mon Jan 27, 2025 10:50 am
by jsimon
Hi @Ajakob233,
In order to help us diagnose where this umlaut issue is coming from, can you please take a look at the records that display in your Nagios Log Server Dashboard? If you can locate a log record with an umlaut on your dashboard and click on the event, you should be able to view the raw JSON data that was received by Logstash. This will let us know if it's a Logstash parsing error, a Grok filter error, an issue with encoding from nxlog, or some other issue. In addition, it may be helpful to know what version of Nagios Log Server you are running, and the distro/version of the linux system you're running it on.
Re: German umlauts in Winevent logs
Posted: Tue Jan 28, 2025 6:44 am
by Ajakob233
Hello,
thanks in Advance for your help.
We running 2024R1.3 on Ubuntu Server 24.04.1 LTS .
The Error is in json and Raw.
json
jason.png
raw
raw.png
only change to default we have done ist set codepage (like on Server)
Prior to this, logs where not readable.
winevent.png
wbr Alex
Re: German umlauts in Winevent logs
Posted: Tue Jan 28, 2025 11:35 am
by jsimon
Based on the fact that the corrupted umlaut characters are in your JSON data, it may be that you need to encode your logs in UTF-8, which Logstash should handle by default. Setting ForceUTF8 to true in your nxlog configuration for your JSON encoding logic should do this. Let us know if this doesn't address the issue.