Problem with sidecar configuration

Graylog Central (peer support)
1

Hey there

We update Graylog to version 3.1 and I dont know what i’m doing wrong.

Messages are landing in graylog, but without fields: source, file, and collector_node_id

Below my last configuration:
# Needed for Graylog
fields_under_root: true
fields.gl2_source_collector: {sidecar.nodeName} fields.collector_node_id: {sidecar.nodeId}

filebeat.inputs:
- input_type: log
  paths:
- /var/www/prod/nep/logs/*.log
  type: log
output.logstash:
   hosts: ["10.16.2.50:5044"]
path:
  data: /var/lib/graylog-sidecar/collectors/filebeat/data
  logs: /var/lib/graylog-sidecar/collectors/filebeat/log

When i add fields.source: {sidecar.nodeName}** to config, the nodeName appears in .. file field When i set **fields_under_root** to false, then i receive no messages. But when I remove **fields.source: {sidecar.nodeName} and leave fields_under_root to false, then i receive collector_node_id.

Maybe some one will have any idea whats I’m doing wrong?
Regards Tomasz V3sp

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.