Hello,
I have following architecture Logstash -> RabbitMQ ->Graylog
I have issue in indexer with parsing:
17 minutes ago graylog_0 d58fe350-f41b-11e6-8407-000c29438b97
MapperParsingException[failed to parse [level]]; nested:
NumberFormatException[For input string: "information"]
In logstash debug I can see message like this:
{
"devid" => "FGVMEV0000000000",
"raw_message" => "date=2017-02-16 time=00:55:46
devname=FortiGate-VM64 devid=FGVMEV0000000000 logid=0100040704 type=event
subtype=system level=notice vd=root logdesc=\"System performance
statistics\" action=\"perf-stats\" cpu=0 mem=47 totalsession=3 disk=0
bandwidth=0/0 setuprate=0 disklograte=0 fazlograte=0 msg=\"Performance
statistics: average CPU: 0, memory: 47, concurrent sessions: 3,
setup-rate: 0\"",
"fazlograte" => "0",
"type" => "fortigate",
"mem" => "47",
"syslog5424_pri" => "189",
"@version" => "1",
"host" => "10.0.0.90",
"action" => "perf-stats",
"disklograte" => "0",
"device_id" => "FortiGate-VM64",
"level" => "notice",
"bandwidth" => "0/0",
"cpu" => "0",
"<189>date" => "2017-02-16",
"message" => "<189>date=2017-02-16 time=00:55:46
devname=FortiGate-VM64 devid=FGVMEV0000000000 logid=0100040704 type=event
subtype=system level=notice vd=root logdesc=\"System performance
statistics\" action=\"perf-stats\" cpu=0 mem=47 totalsession=3 disk=0
bandwidth=0/0 setuprate=0 disklograte=0 fazlograte=0 msg=\"Performance
statistics: average CPU: 0, memory: 47, concurrent sessions: 3,
setup-rate: 0\"",
"vd" => "root",
"logdesc" => "System performance statistics",
"disk" => "0",
"@timestamp" => 2017-02-16T07:55:39.383Z,
"setuprate" => "0",
"logid" => "0100040704",
"time" => "00:55:46",
"totalsession" => "3"
}
Can you please help? I do not understand why level is not parsed it is
string like others that are parsed correctly.
Thank you!
Jiri
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/65dfdded-e8d0-46f9-a6d3-a89f35aec58c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
