Hi Zsolt, did you add the required Grok patterns to your Graylog system?
Cheers, Jochen On Tuesday, 20 October 2015 12:56:17 UTC+2, Zsolt Osztrovszky wrote: > > Hello Guys! > I'd like to setup an extractor with Grok pattern. > This is my sample message and pattern: > 10.10.1.1 - - [13/Oct/2015:17:19:54 +0200] "GET /1111/ed98/561/this.m3u8 > HTTP/1.1" 200 388 "http://10.1.1.1/hls.php?o=1111&p=2kV&t=BASE64"; > "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, > like Gecko) Version/9.0 Safari/601.1.56" 3878 6090 ed98b > > pattern: > %{IP:remote_addr} > > If I push try, it says: Attention We were not able to run the grok > extraction. Please check your parameters. > > What am I doing wrong? > Thanks. > Cheers, > Zsolt > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ab9539b3-7c11-4665-a6f4-f6c092a2b690%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
