In additition to previous post i can share my graylog2 + elasticsearch configurations:
http://dimka.ee/foo/graylog2-prod.conf.txt http://dimka.ee/foo/graylog2-elasticsearch-prod.yml.txt On Monday, March 17, 2014 4:40:45 PM UTC+2, Dmitri Stoljarov wrote: > > Hi, > > Started ES (0.90.10) in debug mode. > Started GL2 (0.20.1) server with no extractors of drools. > Pumped 10 events. > Result - ES has only 5 events. > > Here's ES debug logfile - http://dimka.ee/foo/gl2.debug.log.txt > > I didn't find any anomalies in it, may be you can spot something strange? > > regards, > > > > On Monday, March 17, 2014 4:01:15 PM UTC+2, lennart wrote: >> >> Can you check your ElasticSearch logs for errors? >> >> On Mon, Mar 17, 2014 at 1:38 PM, Dmitri Stoljarov >> <[email protected]> wrote: >> > >> > Any news/ideas about issue with missing logs? >> > >> > >> > >> > On Thursday, March 13, 2014 10:16:03 AM UTC+2, Dmitri Stoljarov wrote: >> >> >> >> Hi, >> >> >> >> I don't have any drools or extractors configured. >> >> >> >> Here's debug output (http://dimka.ee/foo/gl2-0.20.1_debug_output.txt). >> >> >> Hope it helps somehow. >> >> >> >> I sent 5 events to graylog2 Gelf UDP input, but only 3 events were >> written >> >> to ES. >> >> >> >> regards, >> >> >> >> >> > -- >> > You received this message because you are subscribed to the Google >> Groups >> > "graylog2" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
