These are chat archives for mp911de/logstash-gelf

3rd
Aug 2017
algkebab
@algkebab
Aug 03 2017 13:18
Hi everyone. Not sure if my problem is related to logstash-gelf, but when i configure my application to use it i get message not encoded:
something like this: ���Ak�0 ��JɹNB�6�Ba�u��^�DM r��J�1�ߧ��:���}�=I�IG��*�<��3�d�Ď�hZ�!� ���9y��:��Bl�`�Y���E��
i don't experience anything similar from syslog sending messages to graylog
Mark Paluch
@mp911de
Aug 03 2017 14:28
Can you post your config?
(application side)
algkebab
@algkebab
Aug 03 2017 15:35
<appender name="greylog" class="me.moocar.logback.net.SocketEncoderAppender">
    <remoteHost><HOST></remoteHost>
    <port>514</port>
    <encoder class="ch.qos.logback.core.encoder.LayoutWrappingEncoder">
        <pattern>%d{yyyy-MM-dd HH:mm:ss} %-5level [%thread] %logger{36} - %msg%n</pattern>
    </encoder>
</appender>
Mark Paluch
@mp911de
Aug 03 2017 16:52
That's moocar's SocketEncoder in the Config, not logstash-gelf
algkebab
@algkebab
Aug 03 2017 17:08
sorry, accidentally copied wrong config
<appender name="greylog" class="biz.paluch.logging.gelf.logback.GelfLogbackAppender">
    <host>udp:<HOST></host>
    <port>514</port>
    <filter class="ch.qos.logback.classic.filter.ThresholdFilter">
        <level>ERROR</level>
    </filter>
</appender>
algkebab
@algkebab
Aug 03 2017 17:27
and it seems that I am not the first person who has this problem https://stackoverflow.com/questions/43419656/encoded-message-in-graylog
Mark Paluch
@mp911de
Aug 03 2017 18:27
Thanks. 514 is the syslog port. The linked SO post uses port 8514 which suggests as well a syslog input
Please use the GELF input (defaults to port 12201)