I am quite confident my mistake is in the HeaderLine for xm_multiline but
I'm at my wits end on this and any help would be greatly appreciated.
<Extension jboss-multi>
Module xm_multiline
HeaderLine /^....... .. ..:..:.. [-a-zA-Z0-9.]* [A-Z]* com/
</Extension>
<Input udp-1514-in>
Module im_udp
Host 0.0.0.0
Port 1514
InputType jboss-multi
Exec parse_syslog_bsd();
</Input>
<Processor pattern-jboss>
Module pm_pattern
PatternFile /etc/nxlog.d/jboss-patterns.xml
</Processor>
<Output udp-1514-out>
Module om_file
CreateDir true
Exec to_syslog_bsd();
Exec $raw_event =
"---------------------------------------------------------------------------
----\n" + $raw_event;
Exec if $Message =~ /ERROR/ and $Message
=~ /com.wfsc.pki.cms/ {\
$dst =
'com.wfsc.pki.cms-error'; \
} \
else if $Message =~ /ERROR/ and
$Message =~ /com.wells.pkiservices/ {\
$dst =
'com.wells.pkiservices-error'; \
} \
else if $Message =~ /ERROR/ and
$Message =~ /com.wellsfargo.ssh/ { \
$dst =
'com.wellsfargo.ssh-error'; \
} \
else if $Message =~ /ERROR/ and
$Message =~ /java.util/ { \
$dst = 'misc.java-error'; \
} \
else if $Message =~ /ERROR/ and
$Message =~ /java.lang/ { \
$dst = 'misc.java-error'; \
} \
else $dst = 'server';
File '%JBOSSDIR%/' + $Hostname + '/' + $Hostname
+ '-' + $dst + '.log'
</Output>
<Route udp-1514-route>
Path udp-1514-in => pattern-jboss => udp-1514-out
</Route>
I am attempting to use xm_multiline to capture a complete error that looks
like the one below
<11>Dec 27 10:22:05 10.27.40.140 ERROR
com.wfsc.pki.cms.common.cert.CannotEnrollException: Denied by Policy Module
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceHelperImpl.submitEnrollmentReque
st(MSServiceHelperImpl.java:1177)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceHelperImpl.processPendingEnrollm
entRequest(MSServiceHelperImpl.java:128)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceManagerImpl.submitPendingEnrollm
entRequest(MSServiceManagerImpl.java:48)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceManagerImpl.processEnrollmentReq
uests(MSServiceManagerImpl.java:23)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.cert.AbstractCertificateProcessor.getCertificates(Ab
stractCertificateProcessor.java:215)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.enterprise.certimpl.AbstractEnterpriseCertImpl.processPendi
ngRequestTransID(AbstractEnterpriseCertImpl.java:718)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.enterprise.certimpl.SSLCertProcessingImpl.processPending(SS
LCertProcessingImpl.java:182)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServicesPendingRequestsRunnable.call(MS
ServicesPendingRequestsRunnable.java:34)
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServicesPendingRequestsRunnable.call(MS
ServicesPendingRequestsRunnable.java:12)
But after following the example in the nxlog documentation I end up with
this
<11>Dec 27 10:22:05 10.27.40.140 ERROR
com.wfsc.pki.cms.common.cert.CannotEnrollException: Denied by Policy Module
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceHelperImpl.submitEnrollmentReque
st(MSServiceHelperImpl.java:1177)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceHelperImpl.processPendingEnrollm
entRequest(MSServiceHelperImpl.java:128)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceManagerImpl.submitPendingEnrollm
entRequest(MSServiceManagerImpl.java:48)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServiceManagerImpl.processEnrollmentReq
uests(MSServiceManagerImpl.java:23)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.cert.AbstractCertificateProcessor.getCertificates(Ab
stractCertificateProcessor.java:215)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.enterprise.certimpl.AbstractEnterpriseCertImpl.processPendi
ngRequestTransID(AbstractEnterpriseCertImpl.java:718)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.enterprise.certimpl.SSLCertProcessingImpl.processPending(SS
LCertProcessingImpl.java:182)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServicesPendingRequestsRunnable.call(MS
ServicesPendingRequestsRunnable.java:34)
----------------------------------------------------------------------------
---
<11>Dec 27 10:22:05 10.27.40.140 ERROR at
com.wfsc.pki.cms.common.ms.service.MSServicesPendingRequestsRunnable.call(MS
ServicesPendingRequestsRunnable.java:12)
----------------------------------------------------------------------------
---
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
