It doesnt print the bad JSON, and I tried checking all logs with x as the 401th character, theres alot, and all I tested validates on jsonlint.com.
Maybe its too much a stretch to log directly from apache, it doesnt escape the urlpaths, its quite possible theres invalid or non-utf8 stuff in there, but I just cant find it. On Wednesday, 12 February 2014 15:20:22 UTC+1, Kay Röpke wrote: > > Hi! > Part of this is related to > https://github.com/Graylog2/graylog2-server/issues/426 which we are in > the process of fixing right now. > Does that parse error give any more information in the stacktrace, or > doesn't it actually print the invalid json? > If not, I'll try to get it to print it out on a debug level, so we have a > chance to see if it's the json that's actually invalid or the json parser > that's misbehaving (which would most likely be a configuration issues for > it then). > > cheers, > -k > > On Wednesday, February 12, 2014 12:52:16 PM UTC+1, Martin René Mortensen > wrote: >> >> Hi, >> >> Im outputting GELF directory from apache, it may be a stretch, but it >> seemed to work. lately it doesnt, because of JSON parse errors, and at the >> first error it stops the input somehow, doesnt get any more messages. >> >> >> This is the error in graylog2 server log : >> 12:42:29,377 ERROR [GELFProcessor] Could not parse JSON! >> com.fasterxml.jackson.core.JsonParseException: Unrecognized character >> escape 'x' >> (code 120) >> at [Source: java.io.StringReader@791b6956; line: 1, column: 409] >> >> This is a sample log (I also log to files) : >> >> { "version": "1.1", "host": "somehost.example.com", "level": 6, >> "timestamp": 1392205765, "short_message": "POST /ws/pure4WebService/ >> HTTP/1.1", "_user-agent": "Oracle HTTPClient Version 10h", "_client": >> "1.1.127.198", "_duration_usec": 263475, "_duration_sec": 0, "_status": >> 200, "_request_path": "/ws/pure4WebService/", "_request": >> "/ws/pure4WebService/", "_method": "POST", "_referrer": "-", "_hostheader": >> "www1.example.com", "_bytes": 50378, "_scheme": "-" } >> >> >> It validates fine as JSON on jsonlint.com, but its probably not the log >> message its complaining about - but I dont know which. I dont escape my >> 'x''s. >> >> /Martin >> > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
