Hi, there's currently no automatic splitting of messages from within the same UDP packet in the Raw UDP Input (feature request at https://github.com/Graylog2/graylog2-server/issues is welcome).
For your use case you'll have to send one message per UDP packet to the Raw UDP Input of Graylog2. FWIW, the Raw TCP Input allows to split messages on '\0' or '\n' (configurable). Cheers, Jochen Am Dienstag, 19. August 2014 01:14:36 UTC+2 schrieb laurent: > > Hello, > > Using this version : graylog2-web-interface v0.20.6 (Oracle Corporation > 1.7.0_65 / Linux 3.2.0-4-amd64) on Graylog2 > > I got a streams delivered on UDP, and if i look at it with netcat it look > like ok : > > root@Graylog2:/etc/graylog2/server# netcat -u -l -p4199 > 1408319015.472458 GET > "xxxxxxxxx"/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D800000.m3u8" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.003716 "vmplus" > 200 "application/vnd.apple.mpegurl" > 1408319015.522688 GET "xxxxxxxxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D2000000.m3u8" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.007285 "vmplus" > 200 "application/vnd.apple.mpegurl" > 1408319015.523044 GET "xxxxxxxxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000.m3u8" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.002244 "vmplus" > 200 "application/vnd.apple.mpegurl" > > > > But when in GrayLog it looks like line are concatenated with multiple > lines together : > Timestamp Source Message > 2014-08-18 11:20:48.640 audimat 1408321246.855306 GET > "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580212.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.015511 "vmplus" > 200 "video/MP2T" > 2014-08-18 11:20:44.637 audimat 1408321241.492716 GET > "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580209.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.019983 "vmplus" > 200 "video/MP2T" 1408321241.743327 GET xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580210.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.017560 "vmplus" > 200 "video/MP2T" 1408321243.146587 GET xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580211.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.017300 "vmplus" > 200 "video/MP2T" > 2014-08-18 11:20:42.605 audimat 1408321240.440060 GET > "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580204.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.015138 "vmplus" > 200 "video/MP2T" 1408321240.490202 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580205.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.017308 "vmplus" > 200 "video/MP2T" 1408321241.041494 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580206.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.014938 "vmplus" > 200 "video/MP2T" 1408321241.191894 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580207.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.015360 "vmplus" > 200 "video/MP2T" 1408321241.392415 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580208.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.017740 "vmplus" > 200 "video/MP2T" > 2014-08-18 11:20:41.552 audimat 1408321239.587836 GET > "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D800000.m3u8" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.002809 "vmplus" > 200 "application/vnd.apple.mpegurl" 1408321239.738244 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D2000000.m3u8" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.002180 "vmplus" > 200 "application/vnd.apple.mpegurl" 1408321239.738602 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000.m3u8" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.002296 "vmplus" > 200 "application/vnd.apple.mpegurl" 1408321239.988865 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580202.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.014659 "vmplus" > 200 "video/MP2T" 1408321240.289647 GET "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580203.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.021158 "vmplus" > 200 "video/MP2T" > 2014-08-18 11:20:24.614 audimat 1408321221.846799 GET > "xxx.xxx.xxx.xxx" > "/live/ramdisk/bigbuckbunny/noencrypt_HLS/bigbuckbunny-audio_fra_64000_482%3D64000-video%3D4000000-580201.ts" > > "VLC/2.1.4 LibVLC/2.1.4" "xxx.xxx.xxx.xxx" false false 0.016427 "vmplus" > 200 "video/MP2T" > > > Would like to have one Line from raw udp source -> one message on > grayLog2 > > Any tips welcome > > Cheers > > Laurent > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
