Dont show russian characters

Graylog Central (peer support)
1

Problem: when sending data to Graylog, encoding conversion problems are observed:
if the text with numbers contains Russian characters, the search for such a message does not work.

Example:
EC111115377
GrayLog shows: \ xC111115377

2

@jan, can u help me please? its really important task for me

3

I don’t see any russian character in your example, please post real example…

4

letter “E” is on russian.

5

please send exact unicode code for E in russian

6

i think is this?

0415

7

I tried send same message with logger from linux (with UTF-8 support) and it worked correctly for me:
logger $(printf '\u0415C111115377')

I can correctly see ЕC111115377 in graylog web, and can find it with no problem…

Which protocol do you use to transfer log? syslog/gelf/beat? What is your source which send this message? If linux check if you have setup correct locale, output of command locale should be UTF-8, for example ru_RU.UTF-8

8

I use on the server where the nginx logs come from, then the messages go to the local syslog, after they are redirected to the syslog in graylog, and from there they get into graylog

9

i sen what u say and graylog give me this:

image
image1344×278 16.1 KB

10

But when I type russian “E” and send, then show me this:

image
image738×253 17.5 KB

11

can u help me please?

12

I want to get an answer

13

Check your nginx logs which you send via syslog to graylog, if the chars are correctly saved to files…
And please send your locale settings… output of commands:
locale
localectl

Which syslog do you use to forward logs to graylog? rsyslog or syslog-ng? send configuration…

14

in Nginx log chars saved are correctly.
locale setting:
locale:

LANG=en_US.UTF-8
LANGUAGE=
LC_CTYPE="en_US.UTF-8"
LC_NUMERIC=ru_RU.UTF-8
LC_TIME=ru_RU.UTF-8
LC_COLLATE="en_US.UTF-8"
LC_MONETARY=ru_RU.UTF-8
LC_MESSAGES="en_US.UTF-8"
LC_PAPER=ru_RU.UTF-8
LC_NAME=ru_RU.UTF-8
LC_ADDRESS=ru_RU.UTF-8
LC_TELEPHONE=ru_RU.UTF-8
LC_MEASUREMENT=ru_RU.UTF-8
LC_IDENTIFICATION=ru_RU.UTF-8
LC_ALL=

localectl:

System Locale: LANG=en_US.UTF-8
VC Keymap: n/a
X11 Layout: us
X11 Model: pc105

i use rsyslog.

15

can i hear some answer please?

16

please post exact line from nginx log file, that is badly encoded in graylog and the result from graylog.

17

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.