That was it. I forgot to set the decoder.

Sorry to respond so late.

Cristian, Falcas




On Wed, Sep 23, 2015 at 8:08 PM, Michael Trinkala <[email protected]>
wrote:

> Did you set the decoder = "apache" in the LogstreamerInput configuration?
>
> Trink
>
> On Wed, Sep 23, 2015 at 1:16 AM, Cristian Falcas <[email protected]>
> wrote:
>
>> Hello,
>>
>> I can't manage to make heka parse any apache logs.
>>
>> Here is my configuration:
>>
>> ## apache config
>> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
>> combined
>> CustomLog "/var/log/httpd/pulp-http_access.log" combined
>>
>> ## heka config
>> [apache]
>> type = "SandboxDecoder"
>> filename = "lua_decoders/apache_access.lua"
>>
>> [apache.config]
>> type = "combined"
>> user_agent_transform = "true"
>> log_format='%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"'
>>
>> ## heka decoded message
>> 2015/09/23 11:11:17
>> :Timestamp: 2015-09-23 08:11:17.004602885 +0000 UTC
>> :Type: logfile
>> :Hostname: v-so-repo-05.company.net
>> :Pid: 0
>> :Uuid: 3b9f482b-d67c-4d39-b443-a210fb66250c
>> :Logger: apache.pulp-http_.access
>> :Payload: 10.220.10.117 - - [14/Sep/2015:23:40:25 +0300] "GET
>> /repos/ol_latest/6Server/repodata/repomd.xml HTTP/1.1" 200 2142 "-"
>> "urlgrabber/3.9.1 yum/3.2.29"
>>
>> :EnvVersion:
>> :Severity: 7
>>
>> The payload is the exact same string found in the logs file.
>>
>> Can someone help with any ideas?
>>
>> Thank you,
>> Cristian Falcas
>>
>>
>> _______________________________________________
>> Heka mailing list
>> [email protected]
>> https://mail.mozilla.org/listinfo/heka
>>
>>
>
_______________________________________________
Heka mailing list
[email protected]
https://mail.mozilla.org/listinfo/heka

Reply via email to