Hello and thank you for this great piece of software! I joined one of the author's live presentations in Hamburg, and since then I am using graylog2 as logging solution for the company I work for.
Most of the basic stuff works great, it's just the varnish logging I can't seem to make it work. I found very little about this couple online - very strange, no extractors, no group topic, nothing. Varnish is great! My idea was to pipe the logs via simple UDP from varnishncsa (log daemon) instead of storing them in a file and have rsyslog parse them and send the to graylog - avoid unnecessary IO. Since varnishncsa has the -F option, I specified a JSON format according to GELF specification, and this works great, I can see all entries in stdin like a tail -f of the log file, all valid JSON. Now the part that is not working, is that I try to pipe this output to nc (netcat) via UDP. The strange this is, SOME logs appear, after long time, but most of them are lost. I tried the nc command with both -w 1 and without, seems the same, my guess is that netcat keeps the connection open and sends multiple messages until the max packet size is reached, making graylog receive invalid formatted JSON. I should mention that the input is working, I can receive messages in GELF format from PHP via UDP on that port without any problem. If needed, I can provide the exact command I am running. Thank you for your help! Razvan, HH -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
