Hi, It seems the problem remain on 0.1.0 beta1 version. All Windows Application log messages reported as NULL and no way to read details of the message. It looks like winlogbeat is broken in sidecar.
Thanks, Oleg On Wednesday, July 27, 2016 at 3:19:02 PM UTC+2, John wrote: > > > <https://lh3.googleusercontent.com/-lDeyXAOxOBI/V5i0YNXT1bI/AAAAAAAAhE0/06R5HmM-x1UPXgOwp-qEOX2wdaQziusmwCLcB/s1600/extractor.png> > > > <https://lh3.googleusercontent.com/-lDeyXAOxOBI/V5i0YNXT1bI/AAAAAAAAhE0/06R5HmM-x1UPXgOwp-qEOX2wdaQziusmwCLcB/s1600/extractor.png> > Hi, > I'm using Graylog 2.0.1 with collector-sidecar 0.0.8 > And I have an issue when I have messages with some null fields. Graylog is > not extracting any field of these messages, for example if I have a message > like this > > 21/06/2016 16:54:16.514;VMMSGGWTST2;ASH;ModuleManager;;;;;DEBUG;;;Setting > Property [NextModuleName] to String value [SmscQueueManagerModule]; > > with empty fields, graylog is not extracting any field of the message. > It's working only if all the fields have a value > > my extractor is configured like this (in the screenshot) > > I have the same issue with all of the kind of extractors I tried to set up > > Thx > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/411721f2-8e32-4a3f-8de2-24b6f4b08165%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
