try to push windows EventLog into logstash and get pereodicaly .. `<=' for nil:NilClass>,
Woindows 2008r2 w/Cyrilic locale
input {
# get events from NxLog via tcp+json
tcp {
type => "EventLog"
codec => json { charset => "CP1251" }
host => "127.0.0.1"
port => "3515"
tags => [ "tcpjson" ]
}
output {
stdout { codec => rubydebug }
}
}
16:46:08.365 [[main]>worker3] ERROR logstash.pipeline - Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash. {"exception"=>#<NoMethodError: undefined method
<=' for nil:NilClass>, "backtrace"=>["(eval):606:in
initialize'", "org/jruby/RubyArray.java:1613:ineach'", "(eval):604:in
initialize'", "org/jruby/RubyProc.java:281:incall'", "(eval):623:in
initialize'", "org/jruby/RubyArray.java:1613:ineach'", "(eval):618:in
initialize'", "org/jruby/RubyProc.java:281:incall'", "(eval):293:in
filter_func'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:300:infilter_batch'", "org/jruby/RubyProc.java:281:in
call'", "C:/Apps/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:201:ineach'", "org/jruby/RubyHash.java:1342:in
each'", "C:/Apps/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:200:ineach'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:299:in
filter_batch'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:287:inworker_loop'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:263:in
start_workers'"]}
16:46:08.458 [LogStash::Runner] FATAL logstash.runner - An unexpected error occurred! {:error=>#<NoMethodError: undefined method<=' for nil:NilClass>, :backtrace=>["(eval):606:in
initialize'", "org/jruby/RubyArray.java:1613:ineach'", "(eval):604:in
initialize'", "org/jruby/RubyProc.java:281:incall'", "(eval):623:in
initialize'", "org/jruby/RubyArray.java:1613:ineach'", "(eval):618:in
initialize'", "org/jruby/RubyProc.java:281:incall'", "(eval):293:in
filter_func'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:300:infilter_batch'", "org/jruby/RubyProc.java:281:in
call'", "C:/Apps/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:201:ineach'", "org/jruby/RubyHash.java:1342:in
each'", "C:/Apps/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:200:ineach'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:299:in
filter_batch'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:287:inworker_loop'", "C:/Apps/logstash/logstash-core/lib/logstash/pipeline.rb:263:in
start_workers'"]}
16:46:08.614 [Ruby-0-Thread-8: C:/Apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-4.1.0/lib/logstash/inputs/tcp.rb:150] ERROR logstash.inputs.tcp - An error occurred. Closing connection {:client=>"127.0.0.1:57806", :exception=>#<Errno::EBADF: Bad file descriptor - Bad file descriptor>, :backtrace=>["org/jruby/RubyIO.java:3037:insysread'", "C:/Apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-4.1.0/lib/logstash/inputs/tcp.rb:240:in
read'", "C:/Apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-4.1.0/lib/logstash/inputs/tcp.rb:164:inhandle_socket'", "C:/Apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-tcp-4.1.0/lib/logstash/inputs/tcp.rb:153:in
server_connection_thread'"]}