Good call! I tried that on two streams and they are working fine. Odd is true but glad it's working!
On Thursday, January 28, 2016 at 11:56:33 AM UTC-5, Joi Owen wrote: > > I have experienced the same issue; I found if I delete the first stream > and create a new one just like it, the second one usually works. I don't > know why. > > On Thu, Jan 28, 2016 at 10:33 AM, Mcfly ATL <[email protected] > <javascript:>> wrote: > >> Good morning, >> I already posted about this a month ago and didn't know whether to >> finally reply to that or open a new thread. >> >> Here is that thread: >> https://groups.google.com/forum/#!searchin/graylog2/mcflyatl/graylog2/M8H1Rt-Fjgk/80dpwes2CgAJ >> >> I tried everything suggested there to no avail. Now I am working on >> another stream with better formatted (better following of the Syslog RFC) >> and still am not getting the results to pull up. >> >> [Attachment 1] is my test message with the stream rules at the bottom. >> It checks out with the GREEN highlight showing it is a match for the test >> message. >> >> [Attachment 2] is when I search for the same query as my stream rules >> directly in Graylog. >> >> [Attachment 3] is it failing to pull anything from my stream when I >> search for "*" and include a large time window (8 hours). The message was >> sent about an hour ago and even if I select "All messages ever" in the >> search field, it does not pull up any data for my stream. >> >> Any help is greatly appreciated. >> >> Thanks! >> >> >> >> >> >> <https://lh3.googleusercontent.com/-lOtA4NgcfWQ/Vqo_zU8gSNI/AAAAAAAAAAk/IWYHrbQHoyk/s1600/1.png> >> >> <https://lh3.googleusercontent.com/-lOtA4NgcfWQ/Vqo_zU8gSNI/AAAAAAAAAAk/IWYHrbQHoyk/s1600/1.png> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Graylog Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/4d9b046e-b07f-4ee7-b2e9-ad1b4da9440b%40googlegroups.com >> >> <https://groups.google.com/d/msgid/graylog2/4d9b046e-b07f-4ee7-b2e9-ad1b4da9440b%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > > No matter what we think of Linux versus FreeBSD, etc., the one thing I > really like about Linux is that it has Microsoft worried. Anything > that kicks a monopoly in the pants has got to be good for something. > - Chris Johnson > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/29587001-f4a6-4ce4-b9ea-312e04bb5388%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
