GELF message has invalied "short_message"

Graylog Central (peer support)
1

hi team,

in graylog I am getting logs from multiple host in GELF UDP and each host contain multiple docker container, from last few days i got this error and process buffer gets choked due to it
2019-11-26 08:10:11,150 ERROR: org.graylog2.shared.buffers.processors.DecodingProcessor - Error processing message RawMessage{id=2ad1efd0-1024-11ea-b920-0242ac110006, journalOffset=4074470662, codec=gelf, payloadSize=474, timestamp=2019-11-26T08:10:11.149Z, remoteAddress=/10.XX.XX.XXX:37220}
java.lang.IllegalArgumentException: GELF message <2ad1efd0-1024-11ea-b920-0242ac110006> (received from <10.XX.XXX.XX:37220>) has invalid “short_message”:
at org.graylog2.inputs.codecs.GelfCodec.validateGELFMessage(GelfCodec.java:249) ~[graylog.jar:?]

now my problem is, i am not able to get from which host or container i am getting this logs, is there any solution to check it?

2

he @rajnishtyagi

the remoteAddress=/10.XX.XX.XXX:37220} shows where the messages are coming from … or should

3

there are almost 10 containers running and i am using logstash to sends logs in UDP format but i found nothing strange with the configuration

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.