What versions of Tomcat are supported by the Elastic Agent Tomcat integration? I have an instance which runs an older version of Tomcat (8.5), and I get dissect_parsing_error
in my events, which are pushed to Elasticsearch, even though the log format appears to be identical, as far as I can tell.
When I set the Agent log level to debug and set the integration to collect debugging info, I see the following in the agent logs:
16:25:08.308
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: STRIP_PRI field:message
16:25:08.308
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#0:0001 field:message
16:25:08.308
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#1:0002 field:message
16:25:08.308
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: STRIP_PRI field:message
16:25:08.308
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#0:0001 field:message
16:25:08.308
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#1:0002 field:message
16:25:43.314
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: STRIP_PRI field:message
16:25:43.314
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#0:0001 field:message
16:25:43.314
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#1:0002 field:message
16:25:43.314
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: STRIP_PRI field:message
16:25:43.314
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#0:0001 field:message
16:25:43.314
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#1:0002 field:message
16:25:58.318
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: STRIP_PRI field:message
16:25:58.318
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: STRIP_PRI field:message
16:25:58.319
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#0:0001 field:message
16:25:58.319
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#1:0002 field:message
16:25:58.319
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#0:0001 field:message
16:25:58.319
elastic_agent.filebeat
[elastic_agent.filebeat][debug] dissect fail: HEADER#1:0002 field:message