Open Pehesi97 opened 6 years ago
same issue here. wait for an answer.
same issue here, can anyone help?
You could try this plugin: https://github.com/sesame/fluent-plugin-regexp_multi
We are having the same issue - is there a chance this will get fixed?
We are having the same issue - is there a chance this will get fixed?
+1
We are having the same issue - is there a chance this will get fixed?
+1
Same issue. As anyone found a solution? @rsilva-rs plugin doesn't seem to exist anymore.
I think this is not a bug. Issue author's problem is the mismatch between log body and time format.
Second expression
matches 2018-08-08 16:45:04.869 -03:00, [log,api,error] data: [500] SequelizeDatabaseError: relation "daily_courses" does not exist
but time
field, 2018-08-08 16:45:04.869
, is %Y-%m-%d %H:%M:%S.%L
format, not %Y-%m-%d %H-%M-%S.%L
. Put more <pattern>
fixes this problem.
If you have similar pattern not match
log, check your expression/time_format combination for actual logs.
My fluentd config has two regexes, but only the first one will match.
This is my .conf file.
And this
2018-08-08 16:45:05 -0300 [warn]: #0 pattern not match: "2018-08-08 16:45:04.869 -03:00, [log,api,error] data: [500] SequelizeDatabaseError: relation \"daily_courses\" does not exist"
is my Fluentd log.Rubular says my regex should pass. Is there anything I'm doing wrong?