incubator-chukwa-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jerome Boulon <>
Subject Re: Problem in chukwa output
Date Wed, 26 May 2010 19:30:30 GMT
The demux is grouping you data per date/hour/TimeWindow so yes, 1 .done file
could be split into multiple .evt file depending on the content/timestamp of
your data.
Generally, if you have a SysLogInError directory, it¹s because the parser
throws an exception and you should have some files in there.

You may want to take a look at this wiki page to get an idea of Demux data


On 5/26/10 10:55 AM, "Stuti Awasthi" <> wrote:

> Hi all,
> I am facing some problems in chukwa output.
> The following are the process flow in Collector :
> I worked with single .done file of 16MB in size for the analysis
> 1)     Logs were collected in /logs directory.
> 2)     After demux processing the output was stored in /repos directory.
> Following is the structure inside  repos:        /repos
> /SysLog                                     Total Size : 1MB
> /20100503/ *.evt 
> /20100504/*.evt  
> /SysLogInError                        Total Size  : 15MB
> /Š./*.evt
> I have 2 doubts :
> I noticed that my single log file was spilt into multiple  .evt file. My
> output file contained 2 folders inside / SysLog .Is this the correct behaviour
> that a single .done file is split into n number of .evt files and in different
> directory structure?
> There was a directory of SysLogInError generated but there was no ERROR in the
> log file. I was not sure when this directory gets created?
> Any pointers will be helpful.
> Thanks
> Stuti
> DISCLAIMER ========== This e-mail may contain privileged and confidential
> information which is the property of Persistent Systems Ltd. It is intended
> only for the use of the individual or entity to which it is addressed. If you
> are not the intended recipient, you are not authorized to read, retain, copy,
> print, distribute or use this message. If you have received this communication
> in error, please notify the sender and delete all copies of this message.
> Persistent Systems Ltd. does not accept any liability for virus infected
> mails.

View raw message