Rob, Have you added in any Grok patterns to graylog? By default, there are no patterns included with graylog (as far as I can tell, feel free to correct me.) I just pulled the set of patterns from Grok Debug (here <https://grokdebug.herokuapp.com/patterns>) and after that it worked perfectly.
Beyond that, there is nothing special required to get them working. Cheers, Al On Wednesday, February 4, 2015 at 2:33:36 PM UTC-5, Rob Erix wrote: > > Hi. > > First of all, thanks for the idea to integrate grok patterns for the > extractors. In the end this will make the extractions very is - combined > with the possibility to "prematch" with strings and regex. > > I am playing around for days with the patterns in rc-1 and rc-2 but > without success. > > No matter what which pattern I fill in the input box - graylog tells me > "Unable to run the grok extraction - check parameters". > > Is there any special syntax or just plain usual grok patterns? Do I need > to configure something to work with them? > > Maybe someone could put a short example of a working grok pattern? > > TIA. > > Regards > > Rob > -- Notice of Confidentiality: ***This E-mail and any of its attachments may contain Lincoln National Corporation proprietary information, which is privileged, confidential, or subject to copyright belonging to the Lincoln National Corporation family of companies. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout. Thank You. *** -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
