Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-28 Thread updates on tube
it worked!!! thank you so much.. On 2020/02/27 22:37:12, Otto Fowler wrote: > org.apache.metron.parsers.syslog.Syslog3164Parser > is the classname. > > You have confused me with your description. > > 1st. The exception you show, the error points to you using some version of > a syslog

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-27 Thread Otto Fowler
org.apache.metron.parsers.syslog.Syslog3164Parser is the classname. You have confused me with your description. 1st. The exception you show, the error points to you using some version of a syslog parser. 2nd. You only talk about using grok after that. I have tried your sample string with the

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-27 Thread updates on tube
but i can't get the parser? On 2020/02/27 12:13:35, Otto Fowler wrote: > Parsing this messages works with the Syslog3164Parser. Maybe you could > use that. > > On February 27, 2020 at 02:03:50, updates on tube (abrahamfik...@gmail.com) > wrote: > > > # I really apriciate your

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-27 Thread Otto Fowler
Parsing this messages works with the Syslog3164Parser. Maybe you could use that. On February 27, 2020 at 02:03:50, updates on tube (abrahamfik...@gmail.com) wrote: # I really apriciate your quick responses.. please tell us the valid grok patterns for such kind of log

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-26 Thread updates on tube
# I really apriciate your quick responses.. please tell us the valid grok patterns for such kind of log # this is my parser configuration { "parserClassName": "org.apache.metron.parsers.GrokParser", "sensorTopic": "linuxsyslog", "parserConfig": {

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-26 Thread Otto Fowler
Can you provide an example of a syslog line that fails? Clean of personal data of course. Also what is your parser configuration? On February 25, 2020 at 01:05:00, updates on tube (abrahamfik...@gmail.com) wrote: On 2020/02/24 19:31:36, Michael Miklavcic wrote: br/>> That's how we route

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-24 Thread updates on tube
On 2020/02/24 19:31:36, Michael Miklavcic wrote: > That's how we route errors. Looks like the syslog parser had trouble with > one of your syslog messages > > On Mon, Feb 24, 2020, 5:41 AM updates on tube > wrote: > > > i get such error on kibana dashboard no error in storm > >

Re: linux-syslog(centos 7) parsing in apache metron error

2020-02-24 Thread Michael Miklavcic
That's how we route errors. Looks like the syslog parser had trouble with one of your syslog messages On Mon, Feb 24, 2020, 5:41 AM updates on tube wrote: > i get such error on kibana dashboard no error in storm > com.github.palindromicity.syslog.dsl.ParseException: Syntax error @ 1:0 no >

linux-syslog(centos 7) parsing in apache metron error

2020-02-24 Thread updates on tube
i get such error on kibana dashboard no error in storm com.github.palindromicity.syslog.dsl.ParseException: Syntax error @ 1:0 no viable alternative at input 'F' at com.github.palindromicity.syslog.dsl.DefaultErrorListener.syntaxError(DefaultErrorListener.java:33) at