The full_message field is set on the graylog input itself and is optional, I believe it's turned off by default. Edit one of the affected input definitions and check the box. New messages arriving from your nginx will have that field. I don't know if it's possible to have some external tool go back through your already-stored messages and add that missing field back in.
Store full message? (optional) Store the full original syslog message as full_message? On Mon, Feb 29, 2016 at 3:33 AM, Łukasz Sokolik <lukasz.soko...@gmail.com> wrote: > Hi, > I send data from text file by nxlog to graylog, in graylog missing > full_message from about 2-3 weeks (after apt-get upgrade). > I check nxlog by changing output module to file and it's ok, i check also > in wireshark packages sending to graylog. > Everything looks like graylog not log/write full_message, other columns > are ok, message is also ok but it's to short. > > Graylog is on ubuntu 14.04 current > from graylog-1.3-repository-ubuntu14.04_latest.deb > > I can't find any similar problem on "google". How can I proceed debug for > this case in graylog? > > nxlog config: > <Input in_first> > Module im_file > File "/path/mylog.log" > </Input> > > <Output out_first> > Module om_udp > Host graylog.example.com > Port 12204 > OutputType GELF > </Output> > > <Route 1> > Path in_first => out_first > </Route> > > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to graylog2+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/a8fd1d90-03ac-4bac-b4cf-d1186da97c94%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/a8fd1d90-03ac-4bac-b4cf-d1186da97c94%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- No matter what we think of Linux versus FreeBSD, etc., the one thing I really like about Linux is that it has Microsoft worried. Anything that kicks a monopoly in the pants has got to be good for something. - Chris Johnson -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAL5rfGXzu1FkHSGb89aiTxCb0UC4gF9KGRKJHOmhU1NhPG2Snw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
