Error when using syslog-ng graylog2()

the NEW Marketplace GELF Library
1

I’m using syslog-ng graylog2() with Graylog GELF TCP input.
The conf of syslog-ng is as below.
destination redbull_graylog_test {
graylog2( host(“47.94.97.106”) port(9002) persist-name(“redbull_graylog_test”));
};

But I got the error log on graylog server as below.

2022-10-21T09:27:22.477+08:00 ERROR [DecodingProcessor] Unable to decode raw message RawMessage{id=8309cca0-50df-11ed-8dff-0242c2d85535, messageQueueId=2068049, codec=gelf, payloadSize=171, timestamp=2022-10-21T01:27:22.474Z, remoteAddress=/119.45.27.124:41519} on input <6351ef6dfb510b3ff8b947ad>.
2022-10-21T09:27:22.477+08:00 ERROR [DecodingProcessor] Error processing message RawMessage{id=8309cca0-50df-11ed-8dff-0242c2d85535, messageQueueId=2068049, codec=gelf, payloadSize=171, timestamp=2022-10-21T01:27:22.474Z, remoteAddress=/119.45.27.124:41519}
com.fasterxml.jackson.core.JsonParseException: Unexpected character (',' (code 44)): expected a valid value (number, String, array, object, 'true', 'false' or 'null')
 at [Source: (String)"{"version":"1.1","timestamp":1666315642,"short_message":"java.lang.NullPointerException","level":5,"host":"localhost","_program":"","_pid":,"_facility":"user","_class":""}"; line: 1, column: 141]
        at com.fasterxml.jackson.core.JsonParser._constructError(JsonParser.java:1804) ~[graylog.jar:?]
        at com.fasterxml.jackson.core.base.ParserMinimalBase._reportError(ParserMinimalBase.java:693) ~[graylog.jar:?]
        at com.fasterxml.jackson.core.base.ParserMinimalBase._reportUnexpectedChar(ParserMinimalBase.java:591) ~[graylog.jar:?]
        at com.fasterxml.jackson.core.json.ReaderBasedJsonParser._handleOddValue(ReaderBasedJsonParser.java:1902) ~[graylog.jar:?]
        at com.fasterxml.jackson.core.json.ReaderBasedJsonParser.nextFieldName(ReaderBasedJsonParser.java:968) ~[graylog.jar:?]
        at com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject(JsonNodeDeserializer.java:247) ~[graylog.jar:?]
        at com.fasterxml.jackson.databind.deser.std.JsonNodeDeserializer.deserialize(JsonNodeDeserializer.java:68) ~[graylog.jar:?]
        at com.fasterxml.jackson.databind.deser.std.JsonNodeDeserializer.deserialize(JsonNodeDeserializer.java:15) ~[graylog.jar:?]
        at com.fasterxml.jackson.databind.ObjectMapper._readTreeAndClose(ObjectMapper.java:4057) ~[graylog.jar:?]
        at com.fasterxml.jackson.databind.ObjectMapper.readTree(ObjectMapper.java:2552) ~[graylog.jar:?]
        at org.graylog2.inputs.codecs.GelfCodec.decode(GelfCodec.java:130) ~[graylog.jar:?]
        at org.graylog2.shared.buffers.processors.DecodingProcessor.processMessage(DecodingProcessor.java:156) ~[graylog.jar:?]
        at org.graylog2.shared.buffers.processors.DecodingProcessor.onEvent(DecodingProcessor.java:94) [graylog.jar:?]
        at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:95) [graylog.jar:?]
        at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:49) [graylog.jar:?]
        at com.lmax.disruptor.WorkProcessor.run(WorkProcessor.java:143) [graylog.jar:?]
        at com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66) [graylog.jar:?]
        at java.lang.Thread.run(Thread.java:829) [?:?]

It seems the “” empty string is missing after “_pid”:.

Could anyone tell what is wrong on my issue? Thank you very much.

2

Hello,

Looks like a double post and I think this is not a for the Market Place. I believe this is an issue.