We only have 1.3.1 deployed, sorry. If testing with 0.9 is blocking the integration of the patch, I will try to install 0.9 somewhere and test it.
On Tue, Aug 26, 2014 at 3:23 PM, Rainer Gerhards <[email protected]> wrote: > Did you test for both 0.9 and 1.0? > > Sent from phone, thus brief. > Am 26.08.2014 13:59 schrieb "Cristian Falcas" <[email protected]>: > > > Hello, > > > > I tested the branch now, and it seems to work correctly. Meaning that > there > > are no "" messages in errorFiles. I don't know how to force elastic > search > > to reject messages, so I didn't test if in case of error there is also a > > message from rsyslog, > > > > Best regards, > > > > > > > > > > > > On Tue, Aug 26, 2014 at 12:35 PM, Rainer Gerhards < > > [email protected]> > > wrote: > > > > > Folks, > > > > > > I created a patch a couple of days ago and would appreciate if someone > > > could try it out. Without confirmation, I don't like to merge it ;) > > > > > > Full details are in the github bug: > > > https://github.com/rsyslog/rsyslog/issues/104 > > > > > > Rainer > > > > > > > > > On Mon, Aug 11, 2014 at 3:30 PM, Rainer Gerhards < > > [email protected] > > > > > > > wrote: > > > > > > > I maintain omelasticsearch as good as i can and had hoped to be ablw > to > > > > fix this experimentally befor going on vacation. Didn't work out. > > > > Hopefully i'll be able to look at it in the near future. Probably all > > > tgat > > > > is needed is to nit check the "ok" property but rather "status" - > plus > > a > > > > config option which tell which one to check. > > > > > > > > Rainer > > > > > > > > Sent from phone, thus brief. > > > > Am 11.08.2014 14:36 schrieb "Radu Gheorghe" < > > [email protected] > > > >: > > > > > > > > Hi David, > > > >> > > > >> Just a couple comments from me: > > > >> - omelasticsearch is contributed in the sense that someone payed > > Adiscon > > > >> to > > > >> develop it. So I assume Rainer knows what's in there, but it's not > his > > > >> responsibility to maintain the module as Elasticsearch API changes. > > So I > > > >> guess you're right, it's up to the community to maintain it, I just > > > wanted > > > >> to paint the whole context I'm aware of > > > >> - if a test setup is needed, our Logsene > > > >> <http://www.sematext.com/logsene/>should > > > >> work well for that. It exposes the ES API (not 100%, but at least > all > > > the > > > >> indexing and search options are covered), so one could easily > create a > > > >> free > > > >> account and register a free application to test pretty much all that > > is > > > >> Elasticsearch-related > > > >> > > > >> Best regards, > > > >> Radu > > > >> -- > > > >> Performance Monitoring * Log Analytics * Search Analytics > > > >> Solr & Elasticsearch Support * http://sematext.com/ > > > >> > > > >> > > > >> On Mon, Aug 11, 2014 at 1:50 PM, David Lang <[email protected]> wrote: > > > >> > > > >> > omelasticsearch is a contributed module, Rainer does not have a > > setup > > > to > > > >> > test it, he depends on the community to maintain it (other than > when > > > he > > > >> > makes core changes) > > > >> > > > > >> > so for this sort of thing patches from someone are needed > > > >> > > > > >> > David Lang > > > >> > > > > >> > > > > >> > On Mon, 11 Aug 2014, Radu Gheorghe wrote: > > > >> > > > > >> > Hi Cristian, > > > >> >> > > > >> >> This issue seems to be caused by the fact that omelasticsearch > > looks > > > >> for > > > >> >> ok=true in the reply, and that's missing from ES 1.0 and later. > It > > > was > > > >> >> reported here: https://github.com/rsyslog/rsyslog/issues/104 > > > >> >> > > > >> >> I'm not sure if someone is working on the issue, AFAIK Rainer is > in > > > >> >> vacation, so if you or anyone else can submit a patch it would be > > > much > > > >> >> appreciated - we already have two volunteers for testing, > including > > > >> myself > > > >> >> :) > > > >> >> > > > >> >> Best regards, > > > >> >> Radu > > > >> >> > > > >> >> -- > > > >> >> Performance Monitoring * Log Analytics * Search Analytics > > > >> >> Solr & Elasticsearch Support * http://sematext.com/ > > > >> >> > > > >> >> > > > >> >> On Mon, Aug 11, 2014 at 11:34 AM, Cristian Falcas < > > > >> >> [email protected]> > > > >> >> wrote: > > > >> >> > > > >> >> Hello, > > > >> >>> > > > >> >>> I'm using rsyslog to send logs to an elasticsearch instance and > I > > > have > > > >> >>> set > > > >> >>> also the errorFile parameter for all actions of this type. > > > >> >>> > > > >> >>> Unfortunately the error log files are spamed with correct > result: > > > >> >>> > > > >> >>> "reply": { > > > >> >>> "took": 0, > > > >> >>> "errors": false, > > > >> >>> "items": [{ > > > >> >>> "create": { > > > >> >>> "_index": > > > "2014-08-11", > > > >> >>> "_type": > "default", > > > >> >>> "_id": > > > >> "kzmXHE5hQfm0REMjzxPv7g", > > > >> >>> "_version": 1, > > > >> >>> "status": 201 > > > >> >>> } > > > >> >>> }] > > > >> >>> > > > >> >>> > > > >> >>> Status 201 should not be logged as an error. > > > >> >>> > > > >> >>> Best regards, > > > >> >>> Cristian Falcas > > > >> >>> _______________________________________________ > > > >> >>> rsyslog mailing list > > > >> >>> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >> >>> http://www.rsyslog.com/professional-services/ > > > >> >>> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >> >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by > a > > > >> myriad > > > >> >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if > > > you > > > >> >>> DON'T LIKE THAT. > > > >> >>> > > > >> >>> _______________________________________________ > > > >> >> rsyslog mailing list > > > >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >> >> http://www.rsyslog.com/professional-services/ > > > >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > >> myriad > > > >> >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if > > > you > > > >> >> DON'T LIKE THAT. > > > >> >> > > > >> >> _______________________________________________ > > > >> > rsyslog mailing list > > > >> > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >> > http://www.rsyslog.com/professional-services/ > > > >> > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad > > > >> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > > you > > > >> > DON'T LIKE THAT. > > > >> > > > > >> _______________________________________________ > > > >> rsyslog mailing list > > > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > > > >> http://www.rsyslog.com/professional-services/ > > > >> What's up with rsyslog? Follow https://twitter.com/rgerhards > > > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad > > > >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > > > >> DON'T LIKE THAT. > > > >> > > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
