You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Please post all product and debugging questions on our forum. Your questions will reach our wider community members there, and if we confirm that there is a bug, then we can open a new issue here.
For all general issues, please provide the following details for fast resolution:
Version:
logstash v 7.2.0-1
looks like solr_http v3.0.5: logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-solr_http-3.0.5/
Operating System:
Ubuntu on Windows 10
Config File (if you have sensitive info, please remove it):
input {
syslog {
type => "syslog"
host => "127.0.0.1"
port => 9014
grok_pattern => "%{SYSLOG5424LINE}"
}
syslog {
type => "syslog"
host => "127.0.0.1"
port => 9015
}
}
filter {
if [tags] {
#grok error occured
mutate {
add_field => { "grokerror" => "%{[tags][0]}" }
remove_field => [ "tags" ]
}
}
else if [type] == "syslog" {
}
}
output {
if ![tags] and ![grokerror] {
solr_http {
solr_url => "redacted solr http"
}
} else {
stdout { }
}
}
Sample Data:
[WARN ] 2019-06-25 17:15:10.797 [[main]>worker0] solrhttp - An error occurred while indexing: undefined method `iso8601' for 2019-06-25T21:15:10.601Z:LogStash::Timestamp
Steps to Reproduce:
Start logstash using the config file.
Send a syslog to the logstash server.
Please post all product and debugging questions on our forum. Your questions will reach our wider community members there, and if we confirm that there is a bug, then we can open a new issue here.
For all general issues, please provide the following details for fast resolution:
logstash v 7.2.0-1
looks like solr_http v3.0.5: logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-solr_http-3.0.5/
Ubuntu on Windows 10
input {
syslog {
type => "syslog"
host => "127.0.0.1"
port => 9014
grok_pattern => "%{SYSLOG5424LINE}"
}
syslog {
type => "syslog"
host => "127.0.0.1"
port => 9015
}
}
filter {
if [tags] {
#grok error occured
mutate {
add_field => { "grokerror" => "%{[tags][0]}" }
remove_field => [ "tags" ]
}
}
else if [type] == "syslog" {
}
}
output {
if ![tags] and ![grokerror] {
solr_http {
solr_url => "redacted solr http"
}
} else {
stdout { }
}
}
[WARN ] 2019-06-25 17:15:10.797 [[main]>worker0] solrhttp - An error occurred while indexing: undefined method `iso8601' for 2019-06-25T21:15:10.601Z:LogStash::Timestamp
Start logstash using the config file.
Send a syslog to the logstash server.
-Workaround
Use rSolr version 1.1.2
https://medium.com/@sreekantht/indexing-log-files-to-solr-using-logstash-5aad3aa3dba
The text was updated successfully, but these errors were encountered: