Home » Categories » Products » Nagios Log Server » Troubleshooting » Common Problems

Nagios Log Server - Newline Character Added When Adding A Filter To A Search

Problem Description

You will observe that sometimes filters that are added to a search contain a newline (\n) character to the filter and due to this no results are found.

 

 

Explanation

In this screenshot, you can see that from an event, clicking the Magnifying Glass icon will add a filter which matches the value in the field:

 

 

This screenshot shows the filter that was added. You can see that \n was added to the filter, and you can see below this causes 0 hits to be returned:

 

 

You can edit the filter to remove \n which will result in search results being correctly returned.

 

 

 

Resolving The Problem

What is causing this is that the original server that sent the syslog message had \n as part of the message. When you are seeing the value in the event in Nagios Log Server, \n is not being displayed, but it is there in the data.

It has been observed that:

  • When syslogs are sent via TCP, \n is also sent

  • When syslogs are sent via UDP, \n is NOT sent

For more information about TCP and UDP with syslog, please refer to this KB article under the section "Remote Server - Check Rsyslog Config":

Documentation - Logs Not Searchable or Not Coming In

 

 

Final Thoughts

For any support related questions please visit the Nagios Support Forums at:

http://support.nagios.com/forum/

1 (1)
Article Rating (1 Votes)
Rate this article
  • Icon PDFExport to PDF
  • Icon MS-WordExport to MS Word
Attachments Attachments
There are no attachments for this article.
Related Articles RSS Feed
Nagios Log Server - Troubleshooting Commands
Viewed 1886 times since Mon, Feb 11, 2019
Nagios Log Server - Troubleshooting SELinux and rsyslog
Viewed 3258 times since Wed, Mar 30, 2016
Nagios Log Server - Logs Not Searchable or Not Coming In
Viewed 5719 times since Tue, Jan 27, 2015
Forwarding Logs from Nagios Log Server to Another Destination
Viewed 377 times since Wed, Sep 16, 2020
Nagios Log Server - Logstash not running after upgrade to 2.0
Viewed 1503 times since Tue, Nov 14, 2017
Active Directory / LDAP - Troubleshooting Authentication Integration
Viewed 6106 times since Mon, Jun 26, 2017
Nagios Log Server - Troubleshooting Backups
Viewed 1757 times since Fri, Apr 15, 2016
Nagios Log Server - Logstash process dying
Viewed 2156 times since Mon, Apr 10, 2017
Nagios Log Server - License Key Not Accepted
Viewed 1798 times since Wed, Apr 12, 2017
Nagios Log Server - License Activation Issues
Viewed 1782 times since Wed, Dec 13, 2017