Undeterministic error reports regarding missing pattern in grok config
Description
Attachments
2
- 28 Oct 2013, 02:49 PM
- 25 Oct 2013, 02:06 PM
Gliffy Diagrams
Activity
Show:
Jordan Sissel December 3, 2013 at 3:59 PM
Thank you for filing this!
I was working on this today, and I believe this to be a duplicate of LOGSTASH-1316. Follow up for this issue will appear on that ticket. Closing this one.
Johan Maasing November 24, 2013 at 8:19 PM
It happens to me if I have two things in the filter OR two files in the input.
Johan Maasing November 22, 2013 at 1:54 PM
Ran into this while trying to learn logstash, after "hello world"-indexing 1 file I wanted to index 2 files but I don't know how to get around this.
Rick Myers October 29, 2013 at 12:46 PM
This happens for me when i have more than 2 things in the filter. Commenting out the 2nd or 3rd runs as expected. Example
filter {
if [type] == "something" {
grok { *** }
}
if "name" in [tags] {
grok { *** }
}
if "otherthing" in [tags] {
grok { *** }
}
}
Karl Skibinski October 28, 2013 at 2:49 PM
Though the config file is cat'ed within the logfile, I attach it for better reference.
I got some undeterministic errors while starting up logstash. It complains about a missing pattern in my grok config.
+---------------------------------------------------------+ | An unexpected error occurred. This is probably a bug. | | You can find help with this problem in a few places: | | | | * chat: #logstash IRC channel on freenode irc. | | IRC via the web: http://goo.gl/TI4Ro | | * email: logstash-users@googlegroups.com | | * bug system: https://logstash.jira.com/ | | | +---------------------------------------------------------+ The error reported is: pattern %{IPORHOST:clientip} not definedThe error is reported with a virgin directory (data directory deleted) and with a data directory from a former invocation in place.
I attached a log of my shell to this task.