I have experienced the same issue; I found if I delete the first stream and create a new one just like it, the second one usually works. I don't know why.
On Thu, Jan 28, 2016 at 10:33 AM, Mcfly ATL <[email protected]> wrote: > Good morning, > I already posted about this a month ago and didn't know whether to > finally reply to that or open a new thread. > > Here is that thread: > https://groups.google.com/forum/#!searchin/graylog2/mcflyatl/graylog2/M8H1Rt-Fjgk/80dpwes2CgAJ > > I tried everything suggested there to no avail. Now I am working on > another stream with better formatted (better following of the Syslog RFC) > and still am not getting the results to pull up. > > [Attachment 1] is my test message with the stream rules at the bottom. It > checks out with the GREEN highlight showing it is a match for the test > message. > > [Attachment 2] is when I search for the same query as my stream rules > directly in Graylog. > > [Attachment 3] is it failing to pull anything from my stream when I search > for "*" and include a large time window (8 hours). The message was sent > about an hour ago and even if I select "All messages ever" in the search > field, it does not pull up any data for my stream. > > Any help is greatly appreciated. > > Thanks! > > > > > > <https://lh3.googleusercontent.com/-lOtA4NgcfWQ/Vqo_zU8gSNI/AAAAAAAAAAk/IWYHrbQHoyk/s1600/1.png> > > <https://lh3.googleusercontent.com/-lOtA4NgcfWQ/Vqo_zU8gSNI/AAAAAAAAAAk/IWYHrbQHoyk/s1600/1.png> > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/4d9b046e-b07f-4ee7-b2e9-ad1b4da9440b%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/4d9b046e-b07f-4ee7-b2e9-ad1b4da9440b%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- No matter what we think of Linux versus FreeBSD, etc., the one thing I really like about Linux is that it has Microsoft worried. Anything that kicks a monopoly in the pants has got to be good for something. - Chris Johnson -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAL5rfGUyV_kjgruLhJYHAJ_Hz6g5f%3D-%2BjcDU_f6B1ux0E7MfpQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
