Skip to content
This repository was archived by the owner on Mar 21, 2020. It is now read-only.
This repository was archived by the owner on Mar 21, 2020. It is now read-only.

not working properly #33

@samsema4

Description

@samsema4

File Input

    echo '{"event": {"event1": "test_1", "asdf":"asdf"}}' >> /tmp/test.log

Error Log

    2018-08-01 15:01:10 +0530 [error]: #0 https://goldeneggs.splunkcloud.com/services/collector: 400 (Bad Request)
    {"text":"Invalid data format","code":6,"invalid-event-number":0}

Config file


<source>
  @type tail
  path /tmp/test.log
  read_from_head true
  pos_file /tmp/test.log.pos
  tag test.*
  format json
</source>

<match fluent.info>
   @type stdout
</match>

<match **>
    @type splunk-http-eventcollector
    server goldeneggs.splunkcloud.com
    verify false
    token <<my_token>>

    host sams-testenv
    source fluent
    sourcetype fluent

    time_format localtime
    format json

    # Memory buffer with a short flush internal.
    buffer_type memory
    buffer_queue_limit 16
    buffer_chunk_limit 8m
    flush_interval 1s
</match>


<match **>
   @type stdout
</match>

In my splunk, I can see the fluentd.error and fluentd.info but not the logs I want to send. please help !!!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions