I'm looking at the internal logs of my receiving nxlog instance (note that
sending nxlog instances also send their own internal logs), and seeing
things like the following:

2014-08-15 10:07:08 ERROR procedure 'parse_json' failed at line 110,
character 25 in /etc/nxlog.conf. statement execution has been aborted;map
key name not found
2014-08-15 10:07:08 ERROR failed to parse json string, lexical error:
invalid char in json text.;                                       procedure
'parse_csv' failed at;                     (right here) ------^; [procedure
'parse_csv' failed at line 105, character 140 in C:\Program Files
(x86)\nxlog\conf\nxlog.conf. statement execution has been aborted]
2014-08-15 10:07:08 ERROR failed to parse json string, lexical error:
invalid char in json text.;                                       Not
enough fields in CSV input,;                     (right here) ------^; [Not
enough fields in CSV input, expected 14, got 0 in input '']
2014-08-15 10:07:08 ERROR failed to parse json string, parse error:
premature EOF;                                       ;
(right here) ------^; []


And I'm wondering: "how do I go about trying to figure out which host these
errors are coming from?"

I know its not originating from my receiving nxlog instance, as that is
Linux, and doesn't do any parsing of logs using CSV; that would be done by
the sending nxlog instance -- and could be one of a few different sources.

In general, I'd be a bit stumped in determining this; particularly as I
start adding more senders to my deployment.

What I would like is to be able to catch errors; the documentation makes to
mention (that I have seen) of how to go about this. It would be nice to be
able to instruct nxlog to log the IP address (if applicable) and complete
message state, for the error.

Do parse_json, parse_csv etc. return a value, that can be checked? It would
be great if this could be documented.



-- 
Cameron Kerr <cameron.kerr...@gmail.com>
See my blog at http://distracted-it.blogspot.co.nz/  (previously
http://humbledown.org/)
Skype me on cameron.kerr.nz
------------------------------------------------------------------------------
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users

Reply via email to