Hi Rui, this is a bug in Telegraf, see https://github.com/influxdata/telegraf/issues/2045.
Cheers, Jochen On Thursday, 15 December 2016 14:56:27 UTC+1, Rui Goncalves wrote: > > Hi all, > > I'm collecting messages using the Telegraf metrics collector ( > https://github.com/influxdata/telegraf) and sending them into graylog > through an UDP GELF input. However, all received messages get discarded > because graylog complains that the message is incomplete! > > DEBUG [DecodingProcessor] Dropping incomplete message RawMessage{id=xxx; > .... message=<empty>} > > After looking to DecodingProcessor I can see that all received messages > with an empty message field get discarded, because message is a required > field. > > I'm not sure where's the BUG. Telegraf sets the "short_message", because > it's a mandatory field according to GELF spec ( > http://docs.graylog.org/en/2.1/pages/gelf.html). Graylog requires the > field message! If I set the "message" filed instead of short_message, > graylog accepts and indexes the message. > > Can someone help me to identify where' this problem should be fixed? > Graylog2 (2.1.2) or Telegraf (1.1.1)? > > Thanks in advance, > Rui > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9a829777-8efc-4506-a26a-2624d06f6812%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
