Logstash 1.4.2 multiline codec -
part of log i'm trying use:
2014-06-27 14:47:48 error: fatal error (4): syntax error, unexpected 'cakelog' (t_string) in [/public_html/config/log.php, line 5] 2014-06-27 14:47:48 error: [fatalerrorexception] syntax error, unexpected 'cakelog' (t_string) stack trace: #0 lib/cake/error/errorhandler.php(204): errorhandler::handlefatalerror(4, 'syntax error, u...', '/home/...', 5) #1 [internal function]: errorhandler::handleerror(4, 'syntax error, u...', '/home/do...', 5, array) #2 /home/shared_user/cakephp-git/lib/cake/core/app.php(929): call_user_func('errorhandler::h...', 4, 'syntax error, u...', '/home/...', 5, array) #3 /lib/cake/core/app.php(902): app::_checkfatalerror() #4 [internal function]: app::shutdown() #5 {main}
my logstash 1.4.2 config (using alsmost exact same codec described here http://logstash.net/docs/1.4.2/codecs/multiline):
input { file { type => "cake-error" path => "/home/user/domains/example.com/public_html/tmp/logs/error.log" codec => multiline { pattern => "^%{timestamp_iso8601}" negate => true => "previous" } } }
only first error (the 1 without php stack trace) outputted. how can other working?
here why it's not working: https://github.com/elasticsearch/logstash/issues/1482. end of multiline log message can determined when new 1 comes in.
Comments
Post a Comment