Skip to content
This repository has been archived by the owner on Mar 21, 2020. It is now read-only.

not working properly #33

Open
samsema4 opened this issue Aug 1, 2018 · 0 comments
Open

not working properly #33

samsema4 opened this issue Aug 1, 2018 · 0 comments

Comments

@samsema4
Copy link

samsema4 commented Aug 1, 2018

File Input

    echo '{"event": {"event1": "test_1", "asdf":"asdf"}}' >> /tmp/test.log

Error Log

    2018-08-01 15:01:10 +0530 [error]: #0 https://goldeneggs.splunkcloud.com/services/collector: 400 (Bad Request)
    {"text":"Invalid data format","code":6,"invalid-event-number":0}

Config file


<source>
  @type tail
  path /tmp/test.log
  read_from_head true
  pos_file /tmp/test.log.pos
  tag test.*
  format json
</source>

<match fluent.info>
   @type stdout
</match>

<match **>
    @type splunk-http-eventcollector
    server goldeneggs.splunkcloud.com
    verify false
    token <<my_token>>

    host sams-testenv
    source fluent
    sourcetype fluent

    time_format localtime
    format json

    # Memory buffer with a short flush internal.
    buffer_type memory
    buffer_queue_limit 16
    buffer_chunk_limit 8m
    flush_interval 1s
</match>


<match **>
   @type stdout
</match>

In my splunk, I can see the fluentd.error and fluentd.info but not the logs I want to send. please help !!!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant