Using "nxlog" to send Windows EventLogs causes "source sequence is illegal/malformed utf-8"-crash

Description

tail -f ../log/shipper.log
---------------------------------------------------------

An unexpected error occurred. This is probably a bug.

You can find help with this problem in a few places:

 

  • chat: #logstash IRC channel on freenode irc.

IRC via the web: http://goo.gl/TI4Ro

  • email: logstash-users@googlegroups.com

 

---------------------------------------------------------
The error reported is:
source sequence is illegal/malformed utf-8
{:timestamp=>"2013-09-03T23:35:35.944000+0200", :message=>"---------------------------------------------------------\n| An unexpected error occurred. This is probably a bug. |\n| You can find help with this problem in a few places: |\n| |\n| * chat: #logstash IRC channel on freenode irc. |\n| IRC via the web: http://goo.gl/TI4Ro |\n| * email: logstash-users@googlegroups.com |\n| * bug system: https://logstash.jira.com/ |\n| |\n+---------------------------------------------------------+\nThe error reported is: \n source sequence is illegal/malformed utf-8"}

Activity

Show:
Tobias Wolf
September 4, 2013, 2:02 PM

This logfile should contain the message.

Tobias Wolf
September 4, 2013, 3:31 PM

nxlog -> tcp -> LS

Jordan Sissel
September 4, 2013, 3:43 PM

Likely a duplicate or relative of

Jordan Sissel
September 4, 2013, 4:37 PM

https://logstash.jira.com/browse/LOGSTASH-925 has the fix noted; this will be fixed in logstash 1.2.1

The solution will be to set your codec to: json { charset => "CP1252" } in your tcp input.

Tobias Wolf
September 4, 2013, 8:56 PM

Thanks, i'll try it tomorrow.

Fixed

Assignee

Jordan Sissel

Reporter

Tobias Wolf

Labels

None

Fix versions

Affects versions

Configure