[graylog2] Re: UTF-8, syslog input

[ellyas ellyas]

Please explain in detail what is the solution? I have similiar problem. I 
pick up logs from win7x64rus. Russian symbols in string looks like that

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] encoding in Win7 russian logs

[ellyas ellyas]

All logs from russian win7 is unreadble. :( string looks like that:
2014-07-30 15:06:39.222 igor.local.puls  
Service_Control_Manager: 7036:  " 
�� �� ��- 
WinHTTP" �� �� �� , while 
should be 

Service_Control_Manager: 7036: Служба "Служба автоматического обнаружения 
веб-прокси WinHTTP" перешла в состояние Остановлена.


I use Eventlog to Syslog Service for Windows. All logs in english are 
displayed fine. 

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Adds graylog2 some fields itself?

[ellyas ellyas]

Hi friends! I have simple system of graylog2, whos collect logs from pair 
of esxi hosts and a pair of windows server 2008 hosts. All log parse by 
logstash, and it cleans them from some useless fields, like "@version". In 
the logstash out i have, for example, next:

{
"message" => "12345",
"@timestamp" => "6789",
"type" => "vmware",
"host" => "192.168.0.1"
}

But in graylog2 after GELF input add a few fields with constant values like 
"version" ( 1.0 ), "facility" ( gelf-rb ) and "level" ( info[6] ).

How to get rid of these unwelcome fields me?

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: encoding in Win7 russian logs

[ellyas ellyas]

solution is here 


-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Adds graylog2 some fields itself?

[ellyas ellyas]

Someone answer to my simple question PLEASE! :(

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Adds graylog2 some fields itself?

[ellyas ellyas]

> >These fields are added by logstash, or more precisely the gelf-rb 
>
 >module used to format GELF messages. They are added because they are 
> >required fields according to the GELF 1.0 spec.


 Did you probably mean values of that fields, but not fields itself? I have 
tried to use Syslog UDP input without logstash, and there are also these 2 
fields "facility" = "unknown" and "level" = "Invalid [-1]" (values are 
different from GELF). "Version" is gone.

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.