invalid timestamp format

[roidrage]

invalid timestamp format

[benlovell]

This is most likely down to how you've configured your custom_options for the @timestamp element. Can you share your configuration?

[andywenk]

@benlovell thanks for the quick reply. Sure, here is the config:

# lograge
config.lograge.enabled = true
config.lograge.custom_options = lambda do | event |
  {:name => Rails.env, :session => event.payload[:session], :host => event.payload[:host]}
end
config.lograge.formatter = Lograge::Formatters::Logstash.new

This is the same for all environments. As you can see, I did not specifically configure the @timestamp attribute. I assumed that Lograge::Formatters::Logstash.new will create the correct format.

[benlovell]

Hmm. Thanks for the info.

It looks to me like this is something going down in https://github.com/elasticsearch/logstash/blob/v1.1.5/lib/logstash/event.rb

We really should bump our logstash-event dependency as it's quite outdated now. I'll investigate this.

[andywenk]

@benlovell thank's a lot! <3

[benlovell]

No problem, thanks for reporting 😍

[andywenk]

@benlovell did you already have a chance to look into this? Thanks for everything ;-)

[benlovell]

@andywenk I didn't yet, but it's definitely on my radar.

[andywenk]

cool - thanks a lot :D

On 15 December 2014 at 15:17, Ben Lovell [email protected] wrote:

@andywenk https://github.com/andywenk I didn't yet, but it's definitely
on my radar.

—
Reply to this email directly or view it on GitHub
#95 (comment).

Andy Wenk
Hamburg - Germany
RockIt!

http://www.couchdb-buch.de
http://www.pg-praxisbuch.de

GPG fingerprint: C044 8322 9E12 1483 4FEC 9452 B65D 6BE3 9ED3 9588

https://people.apache.org/keys/committer/andywenk.asc

[pxlpnk]

It seems this is fixed in the 1.2.x version: https://github.com/elasticsearch/logstash/blob/v1.2.2/lib/logstash/event.rb

I don't see where lograge is enforcing any version of logstash-event except for the tests.

[pxlpnk]

@andywenk is the current master 940cba8 working for you?

[andywenk]

it should look like this I think:

https://github.com/elasticsearch/logstash/blob/v1.2.2/lib/logstash/event.rb#L37

But what I have when using master from github is:

{
   ... 
   "@timestamp": "2015/02/08 14:13:39 +0000",
   "@version": "1",
   "message": "[200] GET /warenkorb (carts#show)"
}

The configuration from above is the same. Am I missing something? Am I the only one with this problem?
Thanks a lot for looking into this ;-)

[andywenk]

ok it is a bit clearer now. I created a new application and used the same settings and there it is working:

{
    "@timestamp": "2015-02-08T14:45:26.847Z",
    "@version": "1",
    "message": "[200] GET / (start#index)"
}

I think some other gem is doing bad things so that it does not work correctly. I will investigate this further and let you know. If it matters, you can close this issue.

Thanks for everything!

[pxlpnk]

As lograge doesn't do anything about the date format I suggest checking the gems then too.
I am closing this issue for now. But please feel free to report the result of your research in this ticket.

[andywenk]

@pxlpnk the problem is couch_potato which is monkey patching Date globally.

langalex/couch_potato#105

I will close this now ;-)

[pxlpnk]

Thank you for investigating this!

[andywenk]

you're welcome ;-)