Hi Charles,
Turns out that there are two problems here. First, I mucked up the Jackson
serialization of the schema objects. Second, you need to use the Joda format
(with "HH") as we discussed. Once both those changes are made, things seem to
work (at least in unit tests.)
There is a PR for
Hi Charles,
Please file a JIRA ticket and include a short file and the config. I'll take a
look in a few days and figure out what's broken.
Thanks,
- Paul
On Tuesday, July 16, 2019, 6:45:01 PM PDT, Charles Givre
wrote:
Hi Paul,
Thanks for the response. Unfortunately, I tried
Hi Paul,
Thanks for the response. Unfortunately, I tried simply setting a fieldName and
got an error.
"ssdlog": {
"type": "logRegex",
"regex":
"(\\w{3}\\s\\d{1,2}\\s\\d{4}\\s\\d{2}:\\d{2}:\\d{2})\\s+(\\w+)\\[(\\d+)\\]:\\s(.*?(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}).*?)",
Hi Charles,
Thanks much for the feedback. I'll take a look.
A quick look at your config suggests that the timestamp might be the issue. As
I recall, there were no such tests in the unit test class. So, perhaps
something slipped through. (We should add a test for this case.)
In EVF, we use
Hello All,
First, a big thank you Paul for updating the log regex reader to the new EVF
framework. I am having a little trouble getting it to work however...
Here is my config:
,
"ssdlog": {
"type": "logRegex",
"regex":
