On 28/12/16 10:50, Edmundo Alvarez wrote: > I would start by checking if the grok patterns got stored in the database. > Could you please check if there are some documents in the "grok_patterns" > collection inside the MongoDB database you use for Graylog?
Ha, that seems to be the problem. I don't have such a collection at all.
However, the patterns seem to be in content_packs, but not used on the
frontend.
>> db.content_packs.find()
> { "_id" : ObjectId("5834a20185a3f75aaba06c48"), "name" : "Core Grok
> Patterns", "description" : "Core grok patterns", "category" : "Grok",
> "inputs" : [ ] …
Can I make graylog re-create the grok_patterns collection, or create it
myself?
> Additionally, which Graylog version are you using? A link to the grok
> patterns you imported would also help us to see if there's anything odd in
> there.
I imported these patterns:
https://marketplace.graylog.org/addons/407e8aa2-67b2-41a7-9bf5-9fc7f7d3915b
> *** 2.1.2-1 0
> 500 https://downloads.graylog.org/repo/debian/ stable/2.1
> amd64 Packages
best regards,
David
-- TenTwentyFour S.à r.l. W: www.tentwentyfour.lu T: +352 20 211 1024 F:
+352 20 211 1023 9 av. des Hauts-Fourneaux 4362 Esch-sur-Alzette
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/388365f8-23a0-9959-9aea-39070b440dd1%40tentwentyfour.lu.
For more options, visit https://groups.google.com/d/optout.
signature.asc
Description: OpenPGP digital signature
