Hi Alexandre, are there any error messages in the logs of your Graylog nodes?
Are you 100% sure that the Java logs are ingested by Graylog? Are the timestamps of those Java logs correct or might they be "in the future" so that a normal search query doesn't include them? Cheers, Jochen On Thursday, 28 July 2016 22:33:13 UTC+2, Alexandre Verri wrote: > > I have set two extractors for a particular input in Graylog. The *same > input* receives logs from Apache and from a Java application. The Apache > log is being parsed using an Grok extractor, and it is working fine. If > using an extra JSON extractor for the Java application, the messages from > Java application does not appear in the search panel. > > So, in summary: > > Apache logs ==> GELF UDP input ==> Grok extractor ==> message parsed, > showed in search query > Java logs ==> GELF UDP input ==> JSON extractor ==> *message does > not appear in search query* > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/7bf705be-1788-4787-8782-dbb1972ab8dc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
