i get the following error if send Cisco Prime logs to graylog:
2017-05-09 11:09:21,213 ERROR: org.graylog2.shared.buffers.processors.DecodingProcessor - Error processing message RawMessage{id=2ff57150-3497-11e7-94c9-0242ac120007, journalOffset=420970440, codec=syslog, payloadSize=170, timestamp=2017-05-09T09:09:20.741Z, remoteAddress=/10.255.0.3:33025}
java.lang.IllegalArgumentException: Invalid format: "05/09/17" is malformed at "/09/17"
at org.joda.time.format.DateTimeFormatter.parseDateTime(DateTimeFormatter.java:945) ~[graylog.jar:?]
at org.joda.time.DateTime.parse(DateTime.java:160) ~[graylog.jar:?]
at org.joda.time.DateTime.parse(DateTime.java:149) ~[graylog.jar:?]
at org.graylog2.syslog4j.server.impl.event.SyslogServerEvent.parseDate(SyslogServerEvent.java:108) ~[graylog.jar:?]
at org.graylog2.syslog4j.server.impl.event.SyslogServerEvent.parsePriority(SyslogServerEvent.java:136) ~[graylog.jar:?]
at org.graylog2.syslog4j.server.impl.event.SyslogServerEvent.parse(SyslogServerEvent.java:152) ~[graylog.jar:?]
at org.graylog2.syslog4j.server.impl.event.SyslogServerEvent.<init>(SyslogServerEvent.java:50) ~[graylog.jar:?]
at org.graylog2.inputs.codecs.SyslogCodec.parse(SyslogCodec.java:132) ~[graylog.jar:?]
at org.graylog2.inputs.codecs.SyslogCodec.decode(SyslogCodec.java:96) ~[graylog.jar:?]
at org.graylog2.shared.buffers.processors.DecodingProcessor.processMessage(DecodingProcessor.java:146) ~[graylog.jar:?]
at org.graylog2.shared.buffers.processors.DecodingProcessor.onEvent(DecodingProcessor.java:87) [graylog.jar:?]
at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:79) [graylog.jar:?]
at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:45) [graylog.jar:?]
at com.lmax.disruptor.WorkProcessor.run(WorkProcessor.java:143) [graylog.jar:?]
at com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66) [graylog.jar:?]
at java.lang.Thread.run(Thread.java:745) [?:1.8.0_72-internal]
here is a tcpdump of the cisco prime logs:
09:00:13.645127 IP 172.16.137.30.33025 > 172.16.2.94.514: SYSLOG local7.info, length: 102
0x0000: 0050 56b6 04a0 8c60 4f48 4581 0800 4500 .PV....`OHE...E.
0x0010: 0082 0000 4000 3f11 57ce ac10 891e ac10 ....@.?.W.......
0x0020: 025e 8101 0202 006e 0e9d 3c31 3930 3e30 .^.....n..<190>0
0x0030: 352f 3039 2f31 3720 3131 3a30 303a 3133 5/09/17.11:00:13
0x0040: 2e36 3434 2049 4e46 4f20 205b 6165 734d .644.INFO..[aesM
0x0050: 6f6e 6974 6f72 5d20 5b73 6571 7461 736b onitor].[seqtask
0x0060: 6578 6563 7574 6f72 2d36 3034 3338 5d20 executor-60438].
0x0070: 5374 6172 7469 6e67 2072 656d 6169 6e69 Starting.remaini
0x0080: 6e67 2064 6576 6963 6573 3a20 3238 200a ng.devices:.28..
09:00:14.202847 IP 172.16.137.30.33025 > 172.16.2.94.514: SYSLOG local7.info, length: 184
0x0000: 0050 56b6 04a0 8c60 4f48 4581 0800 4500 .PV....`OHE...E.
0x0010: 00d4 0000 4000 3f11 577c ac10 891e ac10 ....@.?.W|......
0x0020: 025e 8101 0202 00c0 218b 3c31 3930 3e30 .^......!.<190>0
0x0030: 352f 3039 2f31 3720 3131 3a30 303a 3134 5/09/17.11:00:14
0x0040: 2e32 3032 2049 4e46 4f20 205b 6a6f 626d .202.INFO..[jobm
0x0050: 616e 6167 6572 5d20 5b61 6c6c 5472 6967 anager].[allTrig
0x0060: 6765 7265 644a 6f62 7345 7865 6375 746f geredJobsExecuto
0x0070: 722d 3234 5d20 494e 464f 3a20 5b53 6368 r-24].INFO:.[Sch
0x0080: 6564 756c 6564 2074 6865 206a 6f62 3d41 eduled.the.job=A
0x0090: 7574 6f6e 6f6d 6f75 7320 4150 204f 7065 utonomous.AP.Ope
0x00a0: 7261 7469 6f6e 616c 2053 7461 7475 7320 rational.Status.
0x00b0: 7769 7468 206e 6578 7420 7469 6d65 2061 with.next.time.a
0x00c0: 7320 5475 6520 4d61 7920 3039 2031 313a s.Tue.May.09.11:
0x00d0: 3035 3a31 3420 4345 5354 2032 3031 375d 05:14.CEST.2017]
0x00e0: 2e0a ..
Version: 2.2.3
thanks