Convert encoding in pipeline rule

Graylog Central (peer support)
1

Hello,

I want to analyze and store logs from a custom application in Graylog. Logs are send from app using log4net UDPAppender to a Raw UDP Input in Graylog. Then I use some GROk patterns to seperate data. This is all working fine.

But when the message strings contains german umlauts, I only see the � sign. I suppose this is related to wrong encoding (ISO vs. Unicode), but I cant find information in manual how to convert from a encoding to another. Is this possible?

2

Your logs should contains only UTF-8 strings. I think you need to convert it to UTF-8 before entering graylog. Try to use encoding utf-8 in log4net configuration:

<encoding value="utf-8" />

in appender tag

3

We havent this log4net structure in application config. I think the programmer has to use the Encoding method explicit. http://logging.apache.org/log4net/release/sdk/html/P_log4net_Appender_UdpAppender_Encoding.htm

But yes, this sould be the solution. Thank you for pointing in the right direction.