Logstash crash with NoMethodError: undefined method `tv_sec' for

Description

SUSE Linux 11sp1
Java 1.7_55 64bit
Logstash 1.4.1 agent processing solr log.

Logstash 1.4.1 crashes on start-up with the following error:

NoMethodError: undefined method `tv_sec' for ["2014-05-14T17:55:54.330Z", "2014-05-14T17:55:54.331Z"]:Array
sprintf at /opt/logstash/lib/logstash/event.rb:223
gsub at org/jruby/RubyString.java:3041
sprintf at /opt/logstash/lib/logstash/event.rb:209
to_s at /opt/logstash/lib/logstash/event.rb:99
encode at /opt/logstash/lib/logstash/codecs/line.rb:54
receive at /opt/logstash/lib/logstash/outputs/stdout.rb:57
handle at /opt/logstash/lib/logstash/outputs/base.rb:86
initialize at (eval):52
call at org/jruby/RubyProc.java:271
output at /opt/logstash/lib/logstash/pipeline.rb:266
outputworker at /opt/logstash/lib/logstash/pipeline.rb:225
start_outputs at /opt/logstash/lib/logstash/pipeline.rb:152

--------------------------------------------------------
Logstash config file:
--------------------------------------------------------

  1. input
    input {
    file {
    type => "solr-stdout"
    tags => ["tag1", "tag2", "tag3", "tag4","solr"]
    path => [ "/some/path/to/logs/catalina.out" ]
    start_position => "end"
    }

}

filter {

multiline {
type => "solr-stdout"
pattern => "^\b(?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)?|May|Jun(?:e)?|Jul(?:y)?|Aug(?:ust)?|Sep(?:tember)?|Oct(?:ober)?|Nov(?:ember)?|Dec(?:ember)?)\b"
negate => true
what => "previous"
}

grok {
type => "solr-stdout"
pattern => "%{MONTH} %{MONTHDAY}, %{YEAR} %{TIME} %{WORD:ampm} %{GREEDYDATA:logmessage}"
}

}

output {
stdout { }

}

---------------------------------------------------------------

Changing multiline section to the entry below stops logstash crash but when output is sent to redis causes 'tv_sec' bug for downstream logstash indexer. All logstash nodes being 1.4.1.

---------------------------------------------------------------------------------
multiline {
type => "solr-stdout"
pattern => "^<\b(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\b"
negate => true
what => "previous"
}
----------------------------------------------------------------------------------

Logstash 1.3.3 works without issue with this configuration, with either multiline section.

Environment

None

Status

Assignee

Logstash Developers

Reporter

Earl Flack

Labels

None

Fix versions

Affects versions

Priority

Configure