metron-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From tkg_cangkul <yuza.ras...@gmail.com>
Subject failed grok parser metron squid
Date Mon, 13 Feb 2017 10:28:15 GMT
hi i've try to add new telemetry data source with squid by following 
this tutorial :

https://cwiki.apache.org/confluence/display/METRON/Adding+a+New+Telemetry+Data+Source

but when i start parser topology squid i've found some error message 
like this :



i've check that file on hdfs. this is the value of that file :

SQUID_DELIMITED %{NUMBER:timestamp}  %{INT:elapsed} %{IPV4:ip_src_addr} 
%{WORD:action}/%{NUMBER:code} %{NUMBER:bytes} %{WORD:method} 
%{NOTSPACE:url} - %{WORD:UNWANTED}\/%{IPV4:ip_dst_addr} 
%{WORD:UNWANTED}\/%{WORD:UNWANTED

pls give me your suggestion.

Thanks before.

Mime
View raw message