Graylog2 / Graylog2/graylog2-server

When incorrectly using converter messages do not store / no errors

Open
#2,832 0 comments 0 reactions 0 assignees View on GitHub
bug P3 processing S3 triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Expected Behavior

When creating an extractor and using the incorrect converter, log an error upon a failed extraction.
## Current Behavior

I created a new input and was in the process of writing the extractors for it. I specifically started working on the timestamp field and extracted it in the format of

`2016 Sep 14 18:49:20`

I didn't read the docs - and realize that this is not a correct format now, but I tried applying the flexible date converter to this field. When I did that, messages were still coming in the input but nothing was getting saved - you could do a search for that whole input after creating that extractor and no messages were logged even though it shows messages being received on the inputs page.

Once this extractor was deleted and or the converter taken off, everything started flowing again. The problem here is that there were no errors issued - it simply stopped logging messages. I checked the server log as well as indexing logs to no avail.
## Possible Solution
## Steps to Reproduce (for bugs)
1. Create new extractor on an input
2. Apply an incorrect converter (I specifically and only tested the flexible date converter)
3. Messages will still flow into the input but will not get logged
## Context
## Your Environment
- Graylog Version: 2.1.1
- Elasticsearch Version: 2.3.5
- MongoDB Version: 3.2.9
- Operating System: Ubuntu 16.04
- Browser version:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.