Skip to content

Instantly share code, notes, and snippets.

@rasputnik
Created June 27, 2011 09:38
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rasputnik/1048575 to your computer and use it in GitHub Desktop.
Save rasputnik/1048575 to your computer and use it in GitHub Desktop.
logstash not parsing syslog?
[root@topcat logstash]# java -jar logstash-1.0.12-monolithic.jar agent -f logstash-simple.cnf
{:args=>["agent", "-f", "logstash-simple.cnf"]}
W, [2011-06-27T10:36:21.439000 #27280] WARN -- runner.class: Input #<LogStash::Inputs::Syslog:0x12297d7> shutting down
2011-06-27T09:36:21.991000Z syslog://10.1.2.3: <30>ntpd[3355]: synchronized to 1.2.3.4, stratum 2
2011-06-27T09:36:22.631000Z syslog://10.2.32.2: <14>ncpd: cmd=0, len=14, data: BB BB 00 1C 00 00 00 00 1C 3F 00 00 00 00
...
...
[root@topcat logstash]# cat logstash-simple.cnf
input {
syslog {
host => "0.0.0.0"
port => 514
type => 'syslog'
}
}
output {
stdout {
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment