# "short\_message" problem **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [August 7, 2018, 9:11am UTC](https://community.graylog.org/t/short-message-problem/6285 "2018-08-07T09:11:05Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![ryf3064](https://avatars.discourse-cdn.com/v4/letter/r/85e7bf/32.png) [@ryf3064](https://community.graylog.org/u/ryf3064)\ **Post date:** [August 7, 2018, 9:11am UTC](https://community.graylog.org/t/short-message-problem/6285/1 "2018-08-07T09:11:05Z")
i have problem graylog version: 2.4.6 java version:1.8.0\_152 problem is : 2018-08-07T16:22:17.265+08:00 ERROR [DecodingProcessor] Error processing message RawMessage{id=fefcfce1-9a1a-11e8-b15a-fa163e5da13d, journalOffset=1210, codec=gelf, payloadSize=351, timestamp=2018-08-07T08:22:17.262Z, remoteAddress=/172.22.25.27:53898} java.lang.IllegalArgumentException: GELF message (received from \<172.22.25.27:53898\>) has empty mandatory “short\_message” field. at org.graylog2.inputs.codecs.GelfCodec.validateGELFMessage(GelfCodec.java:252) ~[graylog.jar:?] at org.graylog2.inputs.codecs.GelfCodec.decode(GelfCodec.java:134) ~[graylog.jar:?] at org.graylog2.shared.buffers.processors.DecodingProcessor.processMessage(DecodingProcessor.java:150) ~[graylog.jar:?] at org.graylog2.shared.buffers.processors.DecodingProcessor.onEvent(DecodingProcessor.java:91) [graylog.jar:?] at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:74) [graylog.jar:?] at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:42) [graylog.jar:?] at com.lmax.disruptor.WorkProcessor.run(WorkProcessor.java:143) [graylog.jar:?] at com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66) [graylog.jar:?] at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_152 [root@tomcat01 ~]# cat /etc/graylog/collector-sidecar/generated/nxlog.conf define ROOT /usr/bin Module xm\_gelf User nxlog Group nxlog Moduledir /usr/libexec/nxlog/modules CacheDir /var/spool/collector-sidecar/nxlog PidFile /var/run/graylog/collector-sidecar/nxlog.pid define LOGFILE /var/log/graylog/collector-sidecar/nxlog.log LogFile %LOGFILE% LogLevel INFO Module xm\_fileop When @daily Exec file\_cycle('%LOGFILE%', 7); \ Module im\_file File ‘/var/log/tima/catalina.out’ PollInterval 1 SavePos True ReadFromLast True Recursive True RenameCheck False Exec $FileName = file\_name(); # Send file name with each message \ Module om\_tcp Host 172.20.224.88 Port 12201 OutputType GELF\_TCP Exec $short\_message = $raw\_event; # Avoids truncation of the short\_message field. Exec $gl2\_source\_collector = ‘6cd9019b-7c99-4e7b-a650-20f891c634c7’; Exec $collector\_node\_id = ‘172.22.25.27’; Exec $Hostname = hostname\_fqdn(); Path 5b693ae7febfbe7ad1709cbb =\> 5b693ac1febfbe7ad1709c8f i try many ways ,but problem is still , please give me some way. thanks before! ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [August 7, 2018, 1:51pm UTC](https://community.graylog.org/t/short-message-problem/6285/2 "2018-08-07T13:51:49Z")
if you try to format your posting: [https://community.graylog.org/faq#format-markdown](https://community.graylog.org/faq#format-markdown) you might get an answer - in addition searching this community board would help you to resolve the issue. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [August 21, 2018, 1:51pm UTC](https://community.graylog.org/t/short-message-problem/6285/3 "2018-08-21T13:51:52Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.