Skip to content

Instantly share code, notes, and snippets.

View lennartkoopmann's full-sized avatar
🤠

Lennart Koopmann lennartkoopmann

🤠
View GitHub Profile
2012-05-03 13:07:53,816 INFO : org.graylog2.inputs.syslog.SyslogProcessor - Date could not be parsed. Was set to NOW because allow_override_syslog_date is true.
2012-05-03 13:07:53,817 DEBUG: org.graylog2.inputs.syslog.SyslogProcessor - Parsed <3> structured data pairs. Adding as additional_fields. Not using tokenizer.
2012-05-03 13:07:53,817 DEBUG: org.graylog2.inputs.syslog.SyslogProcessor - Adding received syslog message <2f5f5405-9e1b-429a-86e5-e03a8429a119> to process buffer: level: 5 | host: nb-lkoopmann | facility: local4 | shortMessage: 1 2012-12-25T22:14:15.003Z mymachine.example.com evntslog - ID47 [exampleSDID@32473 iut="3" eventSource="Application" eventID="1011"] BOMAn application event lo (...)
2012-05-03 13:07:53,817 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Starting to process message <2f5f5405-9e1b-429a-86e5-e03a8429a119>.
2012-05-03 13:07:53,818 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Applying filter [RewriteFilter] on message <2f5f5405-9e1b-429a
2012-04-29 22:19:10,344 DEBUG: org.graylog2.inputs.gelf.GELFProcessor - Adding received GELF message <e3d4d582-44b7-467e-b1e9-6aefc6a72bd2> to process buffer: level: 6 | host: nb-lkoopmann | facility: gelf-rb | shortMessage: ohai
2012-04-29 22:19:10,344 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Starting to process message <e3d4d582-44b7-467e-b1e9-6aefc6a72bd2>.
2012-04-29 22:19:10,345 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Applying filter [RewriteFilter] on message <e3d4d582-44b7-467e-b1e9-6aefc6a72bd2>.
2012-04-29 22:19:10,395 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Applying filter [BlacklistFilter] on message <e3d4d582-44b7-467e-b1e9-6aefc6a72bd2>.
2012-04-29 22:19:10,402 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Applying filter [StreamMatcherFilter] on message <e3d4d582-44b7-467e-b1e9-6aefc6a72bd2>.
2012-04-29 22:19:10,405 DEBUG: org.graylog2.filters.StreamMatcherFilter - Routed message <e3d4d582-44b7-467e-b1e9-6ae
2012-04-19 13:55:20,348 DEBUG: org.graylog2.inputs.gelf.GELFProcessor - Adding received GELF message to process buffer: level: 4 | host: nb-lkoopmann | facility: gelf-rb | shortMessage: Exception: Exception
2012-04-19 13:55:20,348 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Starting to process message.
2012-04-19 13:55:20,348 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Applying filter [BlacklistFilter] on message <c9b1ccff-db54-46b2-b648-5ccfbea3c09e>.
2012-04-19 13:55:20,350 DEBUG: org.graylog2.filters.BlacklistFilter - Message <org.graylog2.filters.BlacklistFilter@2e5facbd> is blacklisted. First match on .*Exception.*
2012-04-19 13:55:20,350 DEBUG: org.graylog2.buffers.processors.ProcessBufferProcessor - Filter [BlacklistFilter] marked message <c9b1ccff-db54-46b2-b648-5ccfbea3c09e> to be discarded. Dropping message.
public class GraylogServerStub extends GraylogServer {
public int callsToProcessBufferInserter = 0;
public LogMessage lastInsertedToProcessBuffer = new LogMessage();
@Override
public ProcessBuffer getProcessBuffer() {
// The process buffer stuf writes back to our counter instance variables.
return new ProcessBufferStub(this);
}
public class GraylogServerStub extends GraylogServer {
public int callsToProcessBufferInserter = 0;
public LogMessage lastInsertedToProcessBuffer = new LogMessage();
@Override
public ProcessBuffer getProcessBuffer() {
// The process buffer stuf writes back to our counter instance variables.
return new ProcessBufferStub(this);
}
2012-04-16 16:35:51,028 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Handling GELF chunk: ID: eabe76821a56de2d Sequence: 1/2 Arrival: 1334586951 Data size: 140
2012-04-16 16:35:51,028 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Handling GELF chunk: ID: eabe76821a56de2d Sequence: 2/2 Arrival: 1334586951 Data size: 42
2012-04-16 16:35:51,872 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Dumping GELF chunk map [1]:
Message <eabe76821a56de2d> Chunks:
ID: eabe76821a56de2d Sequence: 1/2 Arrival: 1334586951 Data size: 140
ID: eabe76821a56de2d Sequence: 2/2 Arrival: 1334586951 Data size: 42
2012-04-16 16:35:51,872 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Message <eabe76821a56de2d> seems to be complete. Handling now.
2012-04-16 16:35:51,894 DEBUG: org.graylog2.inputs.gelf.GELFProcessor - Adding received GELF message to process buffer: level: 6 | host: nb-lkoopmann | facility: gelf-rb | shortMessage: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
2012-04-16 15:23:58,500 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Dumping GELF chunk map:
Message <2502ab8123f8063a>
Chunks:
ID: 2502ab8123f8063a Sequence: 1/5 Arrival: 1334582629 Data size: 140
ID: 2502ab8123f8063a Sequence: 2/5 Arrival: 1334582629 Data size: 140
ID: 2502ab8123f8063a Sequence: 3/5 Arrival: 1334582629 Data size: 140
ID: 2502ab8123f8063a Sequence: 4/5 Arrival: 1334582629 Data size: 140
ID: 2502ab8123f8063a Sequence: 5/5 Arrival: 1334582629 Data size: 80
Message <c6f40d6533f54cf6>
Chunks:
@Override
protected Object decode(ChannelHandlerContext ctx, Channel channel, ChannelBuffer buffer) throws Exception {
byte[] readable = new byte[buffer.readableBytes()];
buffer.toByteBuffer().get(readable, 0, buffer.readableBytes()); // I'm 12 years old and what is this? There must be a better way.
GELFMessage msg = new GELFMessage(readable);
if (msg.getGELFType() == GELFMessage.TYPE_CHUNKED) {
// This is a GELF message chunk. Add chunk to manager.
BUFFER LENGTH: 768
BUFFER OFFSET: 0
BUFFER READABLE BYTES: 140
BUFFER CAPACITY: 140
2012-04-16 14:18:44,908 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Handling GELF chunk: GELF chunk:
ID: 3d8ecb83a1ca849d Sequence: 1/5 Arrival: 1334578724 Data size: 768
BUFFER LENGTH: 768
BUFFER OFFSET: 0
BUFFER READABLE BYTES: 140
BUFFER CAPACITY: 140
2012-04-14 00:42:18,099 INFO : org.graylog2.periodical.BulkIndexerThread - About to index max 4000 messages. You have a total of 0 messages in the queue. [freq:1s]
2012-04-14 00:42:18,099 DEBUG: org.graylog2.messagequeue.MessageQueue - Read 0 messages from queue.
2012-04-14 00:42:18,099 INFO : org.graylog2.periodical.BulkIndexerThread - ... indexing 0 messages.
2012-04-14 00:42:18,761 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Handling GELF chunk: GELF chunk:
ID: 54013cb8502b0d53 Sequence: 1/2 Arrival: 1334356938 Data size: 768
2012-04-14 00:42:18,762 DEBUG: org.graylog2.inputs.gelf.GELFChunkManager - Handling GELF chunk: GELF chunk:
ID: 54013cb8502b0d53 Sequence: 2/2 Arrival: 1334356938 Data size: 768