logsearch-attic / logsearch-filters-common

Logsearch filters common
2 stars 1 forks source link

Remove pid from NXLOG parser #12

Closed mrdavidlaing closed 10 years ago

mrdavidlaing commented 10 years ago

It turns out that fragment being parsed out of the NXLOG message as shipper.pid is in fact not the shippers PID at all; and in fact seems to just be a static string.

image

Across multiple restarts of the nxlog shipper; the "pid" is always 14506 image

Knowing the shipper.pid isn't really useful; so we should just discard this 14506

dpb587 commented 10 years ago

Oops, I assumed. I wonder what that number actually is.

mrdavidlaing commented 10 years ago

Yeah, I wondered too; but couldn't find anything on the first page of Google so gave up.

2014 - the year you ceased to exist of you didn't appear on the first page of Google

-- me