Did you set the decoder = "apache" in the LogstreamerInput configuration?

Trink

On Wed, Sep 23, 2015 at 1:16 AM, Cristian Falcas <[email protected]>
wrote:

> Hello,
>
> I can't manage to make heka parse any apache logs.
>
> Here is my configuration:
>
> ## apache config
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
> combined
> CustomLog "/var/log/httpd/pulp-http_access.log" combined
>
> ## heka config
> [apache]
> type = "SandboxDecoder"
> filename = "lua_decoders/apache_access.lua"
>
> [apache.config]
> type = "combined"
> user_agent_transform = "true"
> log_format='%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"'
>
> ## heka decoded message
> 2015/09/23 11:11:17
> :Timestamp: 2015-09-23 08:11:17.004602885 +0000 UTC
> :Type: logfile
> :Hostname: v-so-repo-05.company.net
> :Pid: 0
> :Uuid: 3b9f482b-d67c-4d39-b443-a210fb66250c
> :Logger: apache.pulp-http_.access
> :Payload: 10.220.10.117 - - [14/Sep/2015:23:40:25 +0300] "GET
> /repos/ol_latest/6Server/repodata/repomd.xml HTTP/1.1" 200 2142 "-"
> "urlgrabber/3.9.1 yum/3.2.29"
>
> :EnvVersion:
> :Severity: 7
>
> The payload is the exact same string found in the logs file.
>
> Can someone help with any ideas?
>
> Thank you,
> Cristian Falcas
>
>
> _______________________________________________
> Heka mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/heka
>
>
_______________________________________________
Heka mailing list
[email protected]
https://mail.mozilla.org/listinfo/heka

Reply via email to