Okay I found the solution. For some reason, the space after "Nom du compte is a non breaking space. So I used alt 0160 to put a non-breaking space here. It works now.
Thanks a lot anyway Kaiser, greatly appreciated ^^ On Tuesday, July 5, 2016 at 8:28:21 AM UTC+4, Zoizo wrote: > > Hello, > > Even with the (?mi) addition, it's not working. I wonder if some > characters are wrong in the log, like maybe some spaces are not spaces in > reality (though it would be weird that they are spaces when c/ced). > > Because, for example (Nom du compte) returns Nom du compte, but (Nom du > compte ) doesn't work. > Kinda lost here :/ > > On Monday, July 4, 2016 at 7:10:49 PM UTC+4, Zoizo wrote: >> >> I'm on 2.0.x, not sure about the full version, I will check tomorrow, but >> it should be the last since I did everything (install, architecture etc) >> last week, with latest rpm. >> >> Input is syslog tcp. >> >> I will try again tomorrow, thanks again. >> >> >> On Mon, Jul 4, 2016 at 7:03 PM, kaiser <[email protected]> wrote: >> >>> My test was done on my graylog test server. >>> >>> Which graylog version do you have? >>> >>> Which kind of input did you use? Gelf (in that case maybe the (?mi) >>> could solve the issue) ? >>> >>> I have made the test with graylog 2.0.3 >>> >>> If it still doesn't work you should try the grok pattern >>> >>> >>> >>> >>> >>> -- >>> You received this message because you are subscribed to a topic in the >>> Google Groups "Graylog Users" group. >>> To unsubscribe from this topic, visit >>> https://groups.google.com/d/topic/graylog2/O8UNzMSxNGY/unsubscribe. >>> To unsubscribe from this group and all its topics, send an email to >>> [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/graylog2/48594df8-bd66-4f5b-90b1-2ca46284bbbf%40googlegroups.com >>> >>> <https://groups.google.com/d/msgid/graylog2/48594df8-bd66-4f5b-90b1-2ca46284bbbf%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >>> For more options, visit https://groups.google.com/d/optout. >>> >> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1f5776e9-b530-40ad-8d58-0f8fa3e559e3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
