#logstash

Does "Ruby exception occurred: undefined method `join' for nil:NilClass" mean anything to anyone?

Got this line in my .conf

msg = split_data[HEADER_FIELDS.size..-1].join('|')

From this waf.conf on this tutorial

2018-02-26T01:10:01-08:00 ERR Connecting error publishing events (retrying): read tcp 10.0.10.19:34402->10.0.10.22:5044: i/o timeout

This is the bane of my existence.

WHY is hardly anything able to send logs? :(

# nc -v 10.0.10.22 5044

Ncat: Version 6.40 ( http://nmap.org/ncat )

Ncat: Connected to 10.0.10.22:5044.

That works every time.

hi guys

anyone here using filebeat?

if yes, is anyone using multiline for some oracle audit logs?

vali: i use filebeat, had the same question about multiline for auditlogs. the answer i got was to use auditbeat.. so give me a shoutout if you hear anything different (adjusted my visualisations instead)