On 28/12/16 10:50, Edmundo Alvarez wrote: > I would start by checking if the grok patterns got stored in the database. > Could you please check if there are some documents in the "grok_patterns" > collection inside the MongoDB database you use for Graylog?
Ha, that seems to be the problem. I don't have such a collection at all.
However, the patterns seem to be in content_packs, but not used on the
frontend.
>> db.content_packs.find()
> { "_id" : ObjectId("5834a20185a3f75aaba06c48"), "name" : "Core Grok
> Patterns", "description" : "Core grok patterns", "category" : "Grok",
> "inputs" : [ ] …
Can I make graylog re-create the grok_patterns collection, or create it
myself?
> Additionally, which Graylog version are you using? A link to the grok
> patterns you imported would also help us to see if there's anything odd in
> there.
I imported these patterns:
https://marketplace.graylog.org/addons/407e8aa2-67b2-41a7-9bf5-9fc7f7d3915b
> *** 2.1.2-1 0
> 500 https://downloads.graylog.org/repo/debian/ stable/2.1
> amd64 Packages
best regards,
David
-- TenTwentyFour S.à r.l. W: www.tentwentyfour.lu T: +352 20 211 1024 F:
+352 20 211 1023 9 av. des Hauts-Fourneaux 4362 Esch-sur-Alzette
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/388365f8-23a0-9959-9aea-39070b440dd1%40tentwentyfour.lu.
For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: OpenPGP digital signature
