Thanks Jochen!
On Thursday, December 15, 2016 at 2:09:12 PM UTC, Jochen Schalanda wrote: > > Hi Rui, > > this is a bug in Telegraf, see > https://github.com/influxdata/telegraf/issues/2045. > > Cheers, > Jochen > > On Thursday, 15 December 2016 14:56:27 UTC+1, Rui Goncalves wrote: >> >> Hi all, >> >> I'm collecting messages using the Telegraf metrics collector ( >> https://github.com/influxdata/telegraf) and sending them into graylog >> through an UDP GELF input. However, all received messages get discarded >> because graylog complains that the message is incomplete! >> >> DEBUG [DecodingProcessor] Dropping incomplete message RawMessage{id=xxx; >> .... message=<empty>} >> >> After looking to DecodingProcessor I can see that all received messages >> with an empty message field get discarded, because message is a required >> field. >> >> I'm not sure where's the BUG. Telegraf sets the "short_message", because >> it's a mandatory field according to GELF spec ( >> http://docs.graylog.org/en/2.1/pages/gelf.html). Graylog requires the >> field message! If I set the "message" filed instead of short_message, >> graylog accepts and indexes the message. >> >> Can someone help me to identify where' this problem should be fixed? >> Graylog2 (2.1.2) or Telegraf (1.1.1)? >> >> Thanks in advance, >> Rui >> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/bcf1a491-207d-4a4a-8309-3c699abc4c86%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
