Use filebeat input csv file to graylog.
Input setting: Add CSV columns as fields
Works fine!
Then set “Convert to numeric value” to a number fields, for alert when the number field > 20
But if the value of number field > 10, it will cause Indexer failures:
| 3 minutes ago | winfilebeat_0 | c53e4d59-3a75-11e9-b455-001a4a160164 | {“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [Number] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:"For input string: “2\u00001"”}} |
|---|---|---|---|
| 3 minutes ago | winfilebeat_0 | c53e4d5a-3a75-11e9-b455-001a4a160164 | {“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [Number] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:"For input string: “3\u00003\u00001"”}} |
| 3 minutes ago | winfilebeat_0 | c53dd831-3a75-11e9-b455-001a4a160164 | {“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [Number] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:"For input string: “2\u00001"”}} |
| 3 minutes ago | winfilebeat_0 | c53e4d54-3a75-11e9-b455-001a4a160164 | {“type”:“illegal_argument_exception”,“reason”:“mapper [Number] of different type, current_type [long], merged_type [keyword]”} |
| 3 minutes ago | winfilebeat_0 | c53e4d52-3a75-11e9-b455-001a4a160164 | {“type”:“illegal_argument_exception”,“reason”:“mapper [Number] of different type, current_type [long], merged_type [keyword]”} |
| 3 minutes ago | winfilebeat_0 | c53e2643-3a75-11e9-b455-001a4a160164 | {“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [Number] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:"For input string: “1\u00002"”}} |
| 3 minutes ago | winfilebeat_0 | c53dd82d-3a75-11e9-b455-001a4a160164 | {“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [Number] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:"For input string: “1\u00002"”}} |
| 3 minutes ago | winfilebeat_0 | c53e2641-3a75-11e9-b455-001a4a160164 | {“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [Number] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:"For input string: “3\u00001"”}} |