Getting fluent parse error in logstash

[loomltd]

Getting fluent parse error in logstash

[doron327]

Hi @raghuOrb the data is being send as it is, you don't need fluent codec on the logstash input side.
this is what I'm using on the logstash receiving side:

tcp {

    port => 9999

    ssl_enable => true

    ssl_cert => "creds/cert.pem"

    ssl_key => "creds/cert.key"

    ssl_verify => false

}

[doron327]

I've updated the README file to include this example :)

[raghuOrb]

@doron327 I'm using insecure connection for testing purposes. Will move to SSL later. After removing the codec => fluent, it is working smoothly. However when I wanted to write the output clause in logstash.conf to a file, I tried line, json_lines, fluent, msgpack codecs. JSON_LINES worked best for me but info such as tag is missing.

output {
  stdout {
   codec => rubydebug
  }
}

output {
  file {
    path => "/usr/share/logstash/mylog/mylog-%{+YYYY-MM-dd}.log"
    codec => json_lines
  }
}

Both of the output had tag missing.
Output from rubydebug is

{
    "@timestamp" => 2018-03-20T12:56:17.102Z,
          "host" => "XX.XX.XX.XX",
          "port" => 57504,
      "@version" => "1",
       "message" => "{\"dummy log\"}"
}

Output from json_lines is

{"@timestamp":"2018-03-20T12:56:17.102Z","host":"XX.XX.XX.XX","port":57504,"@version":"1","message":"{\"dummy log\"}"}

[doron327]

Hi @raghuOrb, you should use the Logstash tcp output clause.
regarding the tags, what tag are you expecting? you can add any tag you like in fluent before sending the data through the loom output plugin.
is that help?

[raghuOrb]

I think documentation should have info about tag_key and include_tag_key in config parameters as well. I'm successfully using it with logstash but tag was not a part of the message by default which is not intuitive.