metron-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From tkg_cangkul <>
Subject failed grok parser metron squid
Date Mon, 13 Feb 2017 10:28:15 GMT
hi i've try to add new telemetry data source with squid by following 
this tutorial :

but when i start parser topology squid i've found some error message 
like this :

i've check that file on hdfs. this is the value of that file :

SQUID_DELIMITED %{NUMBER:timestamp}  %{INT:elapsed} %{IPV4:ip_src_addr} 
%{WORD:action}/%{NUMBER:code} %{NUMBER:bytes} %{WORD:method} 
%{NOTSPACE:url} - %{WORD:UNWANTED}\/%{IPV4:ip_dst_addr} 

pls give me your suggestion.

Thanks before.

View raw message