Hi Frank, it looks like the "timestamp" message field in one (or more) of your messages has the wrong type (String as opposed to being an actual timestamp).
This *shouldn't* happen, but maybe rotating indices (System / Indices / Maintenance) will help. Cheers, Jochen On Thursday, 12 January 2017 11:55:05 UTC+1, Frank wrote: > > Hi, > > I installed and configured the Splunk output plugin, to forward one stream > to Splunk directly. > But when new messages get routed to the stream, the plugin just logs this > error: > > ERROR [OutputBufferProcessor] Error in output [class > com.graylog.splunk.output.SplunkOutput]. > java.lang.ClassCastException: Cannot cast java.lang.String to > org.joda.time.DateTime > at java.lang.Class.cast(Class.java:3369) ~[?:1.8.0_111] > at org.graylog2.plugin.Message.getFieldAs(Message.java:380) > ~[graylog.jar:?] > at org.graylog2.plugin.Message.getTimestamp(Message.java:178) > ~[graylog.jar:?] > at com.graylog.splunk.output.senders.TCPSender.send(TCPSender.java:151) > ~[?:?] > at com.graylog.splunk.output.SplunkOutput.write(SplunkOutput.java:87) > ~[?:?] > at > org.graylog2.buffers.processors.OutputBufferProcessor$1.run(OutputBufferProcessor.java:189) > > [graylog.jar:?] > at > com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:176) > > [graylog.jar:?] > at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > [?:1.8.0_111] > at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0_111] > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > [?:1.8.0_111] > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > [?:1.8.0_111] > at java.lang.Thread.run(Thread.java:745) [?:1.8.0_111] > > Any ideas how to solve this? > > Frank > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/d718a03d-dc43-4376-892e-7571f37fc98b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
