Error getting Windows Logs into GrayLog

Graylog Central (peer support)
,
1

Using Sidecar and winlogbeat, I receive the following error:
{“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [winlogbeat_host_name] of type [date] in document with id ‘0f9010f0-c905-11e9-8ea4-000c291b09e6’”,“caused_by”:{“type”:“illegal_field_value_exception”,“reason”:“Cannot parse “9010-13”: Value 13 for monthOfYear must be in the range [1,12]”}}

I am receiving logs from one system, but the other 4 I have set up all are showing the same error.

Any ideas on what I have configured incorrect?

2

on first ingest hostname was detected as date - and 13 is not a valid one for month …

so the solution:

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.