Hello,
All grok patterns are defined twice in my Graylog (System --> Grok Patterns).
Is it normal or is it a bug ?
Must I delete all duplicated entries ?
Please check the “grok_patterns” collection in the MongoDB database used by Graylog for duplicate entries.
While this should not happen, I won’t rule out a bug in importing Grok patterns.
This collection contains all grok patterns twice.
For example:
db.grok_patterns.find({“name”:“USER”})
{ “_id” : ObjectId(“59aec58243c5805fee919331”), “name” : “USER”, “pattern” : “%{USERNAME}”, “content_pack” : “59aec58243c5805fee9192e5” }
{ “_id” : ObjectId(“59f0ab2143c58073b646bcf6”), “name” : “USER”, “pattern” : “%{USERNAME}”, “content_pack” : “59aec58243c5805fee9192e5” }
I was in Graylog 2.3.1 and I updated to 2.3.2, it may introduced this bug.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.