Hello, I have an Input that collects nginx access logs that are sent in the JSON format. I’ve been following the official Graylog guide on how to set up the extractor: How to use a JSON Extractor | Graylog As it’s been suggested in the guide, I have two extractors: One to parse the message into a …

I have come to the conclusion that the extractor works properly, however it still keeps missing. I do not know why this happens

Update: As soon as I apply the second extractor, the messages stop coming in.

Hello && Welcome @cesq We would need to see the configuration made, How your ingesting them, logs (i.e., GL , ES) etc… Its had to tell what the issue is from the information given. When you do post any configuration please use the markdown, if you’re unsure take a look here

Hi, sadly I don’t understand what you mean by that. Nor do I understand these terms. Configuration of what exactly would you like to see?

Graylog version is 4.2.10+37fbc90 and it’s running on Red Hat - kernel 4.18

@gsmith I found an error log [err new] It has something to do with the DateTime format

Hello, Error shown above, Elasticsearch failed to parse the date in the “DateTime” field. You need to convert it and best option probably would be a pipeline

JSON Extractor stops messages from showing up in input

Graylog Central (peer support)

cesq July 27, 2022, 7:29am 9

Solution on this post: Failed to index [1] messages. failed to parse field [DateTime] of type [date] in document - #6 by cesq

Topic		Replies	Views
JSON extractor not working? Graylog Central (peer support)	5	4887	September 24, 2018
Failing JSON Extractor Graylog Central (peer support) pipeline-rules , debuggingpl	14	6109	December 28, 2018
Syslog messages disappearing after JSON extractor applied Graylog Central (peer support)	7	2360	February 13, 2018
JSON extractor not working Graylog Central (peer support) pipeline-rules	10	6252	August 22, 2020
Failed to index [1] messages. failed to parse field [DateTime] of type [date] in document Graylog Central (peer support)	7	2338	August 9, 2022

JSON Extractor stops messages from showing up in input

Related topics