Re: [graylog2] converters in grok pattern

2016-06-23 Thread Андрей Грошев
четверг, 23 июня 2016 г., 12:43:21 UTC+3 пользователь Jan Doberstein написал: > > Hej, > > > > On 23. Juni 2016 at 09:22:40, Андрей Грошев (gree...@gmail.com > ) wrote: > > > And for example request http_code:<204 don't worked. > > I found exampl

[graylog2] converters in grok pattern

2016-06-23 Thread Андрей Грошев
Hello people! Again stupid question:) I try processed syslog message through grok pattern. I get all the required fields. But all them have string type. And for example request http_code:<204 don't worked. I found example define pattern as %{INT:http_code;int} (a semicolon, not a colon as in

[graylog2] Re: parsing syslog messages on many services

2016-06-21 Thread Андрей Грошев
processed two times, This may have an effect under heavy loads. Right? > > Cheers, > Jochen > > On Tuesday, 21 June 2016 10:44:45 UTC+2, Андрей Грошев wrote: >> >> Hello people! >> I newbie in graylog and I want understand how right parse syslog messages >>