Hi all,
I'm collecting messages using the Telegraf metrics collector
(https://github.com/influxdata/telegraf) and sending them into graylog
through an UDP GELF input. However, all received messages get discarded
because graylog complains that the message is incomplete!
DEBUG [DecodingProcessor] Dropping incomplete message RawMessage{id=xxx;
.... message=<empty>}
After looking to DecodingProcessor I can see that all received messages
with an empty message field get discarded, because message is a required
field.
I'm not sure where's the BUG. Telegraf sets the "short_message", because
it's a mandatory field according to GELF spec
(http://docs.graylog.org/en/2.1/pages/gelf.html). Graylog requires the
field message! If I set the "message" filed instead of short_message,
graylog accepts and indexes the message.
Can someone help me to identify where' this problem should be fixed?
Graylog2 (2.1.2) or Telegraf (1.1.1)?
Thanks in advance,
Rui
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/32a8cb4b-48f6-46bf-83cd-4d39d9c7c3ff%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
