Hi Alexandre, are there any error messages in the logs of your Graylog nodes?
Are you 100% sure that the Java logs are ingested by Graylog? Are the timestamps of those Java logs correct or might they be "in the future" so that a normal search query doesn't include them? Cheers, Jochen On Thursday, 28 July 2016 22:33:13 UTC+2, Alexandre Verri wrote: > > I have set two extractors for a particular input in Graylog. The *same > input* receives logs from Apache and from a Java application. The Apache > log is being parsed using an Grok extractor, and it is working fine. If > using an extra JSON extractor for the Java application, the messages from > Java application does not appear in the search panel. > > So, in summary: > > Apache logs ==> GELF UDP input ==> Grok extractor ==> message parsed, > showed in search query > Java logs ==> GELF UDP input ==> JSON extractor ==> *message does > not appear in search query* > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/7bf705be-1788-4787-8782-dbb1972ab8dc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
