Hi Yiannis,
those messages mean that there were some corrupt GELF messages received by
your GELF UDP input. This can have many causes, like corrupt UDP packets on
the network, sudden connection drops (which also lead to corrupt UDP
packets), or simply a broken GELF client.
Cheers,
Jochen
On Wednesday, 6 July 2016 23:04:46 UTC+2, Yiannis wrote:
>
> Hi all,
> my graylog server every now and then throws the following error
>
> 2016-07-06T18:16:31.634Z ERROR [DecodingProcessor] Error processing
> message RawMessage{id=c3e09906-43a5-11e6-8d92-14feb5dac0e1,
> journalOffset=8155803, codec=gelf, payloadSize=2473,
> timestamp=2016-07-06T18:16:31.632Z}
> java.util.zip.ZipException: invalid distance too far back
> at
> java.util.zip.InflaterInputStream.read(InflaterInputStream.java:164)
> ~[?:1.8.0_91]
> at java.util.zip.GZIPInputStream.read(GZIPInputStream.java:117)
> ~[?:1.8.0_91]
> at java.io.FilterInputStream.read(FilterInputStream.java:107)
> ~[?:1.8.0_91]
> at com.google.common.io.ByteStreams.copy(ByteStreams.java:110)
> ~[graylog.jar:?]
> at
> com.google.common.io.ByteStreams.toByteArray(ByteStreams.java:168)
> ~[graylog.jar:?]
> at org.graylog2.plugin.Tools.decompressGzip(Tools.java:202)
> ~[graylog.jar:?]
> at
> org.graylog2.inputs.codecs.gelf.GELFMessage.getJSON(GELFMessage.java:57)
> ~[graylog.jar:?]
> at org.graylog2.inputs.codecs.GelfCodec.decode(GelfCodec.java:110)
> ~[graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.DecodingProcessor.processMessage(DecodingProcessor.java:136)
>
> ~[graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.DecodingProcessor.onEvent(DecodingProcessor.java:82)
>
> [graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:58)
>
> [graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:35)
>
> [graylog.jar:?]
> at com.lmax.disruptor.WorkProcessor.run(WorkProcessor.java:139)
> [graylog.jar:?]
> at
> com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66)
>
> [graylog.jar:?]
> at java.lang.Thread.run(Thread.java:745) [?:1.8.0_91]
>
> 2016-07-06T20:22:57.544Z ERROR [DecodingProcessor] Error processing
> message RawMessage{id=6d6dfe20-43b7-11e6-9c4f-14feb5dade21,
> journalOffset=13128278, codec=gelf, payloadSize=1659,
> timestamp=2016-07-06T20:22:57.538Z}
> java.util.zip.ZipException: invalid distance too far back
> at
> java.util.zip.InflaterInputStream.read(InflaterInputStream.java:164)
> ~[?:1.8.0_91]
> at java.util.zip.GZIPInputStream.read(GZIPInputStream.java:117)
> ~[?:1.8.0_91]
> at java.io.FilterInputStream.read(FilterInputStream.java:107)
> ~[?:1.8.0_91]
> at com.google.common.io.ByteStreams.copy(ByteStreams.java:110)
> ~[graylog.jar:?]
> at
> com.google.common.io.ByteStreams.toByteArray(ByteStreams.java:168)
> ~[graylog.jar:?]
> at org.graylog2.plugin.Tools.decompressGzip(Tools.java:202)
> ~[graylog.jar:?]
> at
> org.graylog2.inputs.codecs.gelf.GELFMessage.getJSON(GELFMessage.java:57)
> ~[graylog.jar:?]
> at org.graylog2.inputs.codecs.GelfCodec.decode(GelfCodec.java:110)
> ~[graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.DecodingProcessor.processMessage(DecodingProcessor.java:136)
>
> ~[graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.DecodingProcessor.onEvent(DecodingProcessor.java:82)
>
> [graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:58)
>
> [graylog.jar:?]
> at
> org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:35)
>
> [graylog.jar:?]
> at com.lmax.disruptor.WorkProcessor.run(WorkProcessor.java:139)
> [graylog.jar:?]
> at
> com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66)
>
> [graylog.jar:?]
> at java.lang.Thread.run(Thread.java:745) [?:1.8.0_91]
>
> Could someone explain what is going wrong.
>
> Regards
> Yiannis
>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/e3b84a16-4226-4f34-824d-676faaa40b77%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
