Hi Rui, this is a bug in Telegraf, see https://github.com/influxdata/telegraf/issues/2045.
Cheers, Jochen On Thursday, 15 December 2016 14:56:27 UTC+1, Rui Goncalves wrote: > > Hi all, > > I'm collecting messages using the Telegraf metrics collector ( > https://github.com/influxdata/telegraf) and sending them into graylog > through an UDP GELF input. However, all received messages get discarded > because graylog complains that the message is incomplete! > > DEBUG [DecodingProcessor] Dropping incomplete message RawMessage{id=xxx; > .... message=<empty>} > > After looking to DecodingProcessor I can see that all received messages > with an empty message field get discarded, because message is a required > field. > > I'm not sure where's the BUG. Telegraf sets the "short_message", because > it's a mandatory field according to GELF spec ( > http://docs.graylog.org/en/2.1/pages/gelf.html). Graylog requires the > field message! If I set the "message" filed instead of short_message, > graylog accepts and indexes the message. > > Can someone help me to identify where' this problem should be fixed? > Graylog2 (2.1.2) or Telegraf (1.1.1)? > > Thanks in advance, > Rui > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9a829777-8efc-4506-a26a-2624d06f6812%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
