Hi,
Using 0.90 from official debian 7 repo.
*There were 16,451 failed indexing attempts in the last 24 hours*
As you see lots of messages drops to dead_letter collection everyday. Here
are some error messages:
MapperParsingException[failed to parse [status]]; nested:
NumberFormatException[For input string: "sent (250 2.0.0 from
MTA(smtp:[::1]:10030): 250 2.0.0 Ok: queued as AC5CEE0ECF)"];
MapperParsingException[failed to parse [status]]; nested:
NumberFormatException[For input string: "removed"];
MapperParsingException[failed to parse [status]]; nested:
NumberFormatException[For input string: "sent (250 2.1.5 Delivery OK)"];
MapperParsingException[failed to parse [status]]; nested:
NumberFormatException[For input string: "error"];
And this is a sample from dead_letter collection:
{ "_id" : ObjectId("5424f3b084aede9b4a3e6f97"), "message" : { "sub" :
"postfix", "status" : "removed", "gl2_source_node" :
"535e1c17-06e4-40dc-bd42-6e8f73ebd9d8", "type" : "xxxxx.mail", "version" :
"1.0", "timestamp" : "2014-09-26 05:03:41.000", "message" : "Sep 26
08:03:41 mx2 postfix/qmgr[18198]: 7AC36E0DD2: removed", "level" :
NumberLong(6), "queueid" : "7AC36E0DD2", "facility" : "gelf-rb", "_id" :
"7d5e0190-453a-11e4-bf02-002590988c2c", "source" : "79.123.252.14",
"gl2_source_input" : "52e2583684ae537451b5a1c9", "path" :
"/logs/79.123.252.14/mail.log", "streams" : [ ] }, "timestamp" :
ISODate("2014-09-26T05:03:44.588Z"), "letter_id" :
"7d9d7b93-453a-11e4-bf02-002590988c2c" }
So why graylog errors if the gelf message has "status" field? Any ideas?
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
