Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

The syslog parser trips on the date. #7367

Closed
ph opened this issue Jun 19, 2018 · 4 comments
Closed

The syslog parser trips on the date. #7367

ph opened this issue Jun 19, 2018 · 4 comments
Assignees
@ph
Labels
bug Filebeat Filebeat

Comments

@ph
Copy link
Contributor

ph commented Jun 19, 2018

2018-06-19T09:13:38.770Z ERROR [syslog] syslog/input.go:114 can't not parse event as syslog rfc3164 {"message": "<190>2018-06-19 02:13:38 Local7.Info HOST-1111-PQWER-SWT1 2018-06-19T02:13:38.635322-07:00 HOST-1111-PQWER-SWT1 Acl: %ACL-6-IPACCESS: list Isolation-4E Vlan100 denied tcp 10.10.10.10(56393) -> 13.14.14.53(443)"}
@ph ph added bug Filebeat Filebeat labels Jun 19, 2018
@ph ph self-assigned this Jun 19, 2018
@ph
Copy link
Contributor Author

ph commented Jun 19, 2018 •
edited
Loading

This message was relayed before reaching syslog, we currently don't take into account that case.

@urso
Copy link

urso commented Mar 3, 2019

@ph Any update? Is the issue cause by the sequence number of the data paster itself?

@ph
Copy link
Contributor Author

ph commented Mar 5, 2019

It might be fixed in master with the changes I've made to the sequencce parsing, I have to take a second look

@ph
Copy link
Contributor Author

ph commented Dec 20, 2019

Fixed.

@ph ph closed this as completed Dec 20, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ph ph

Labels
bug Filebeat Filebeat
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ph @urso