Hello,
I am using default mapping, my log message is like (for example):
2017-04-25 10:12:56.366 WARN 2989 --- [DiscoveryClient-InstanceInfoReplicator-0] com.netflix.discovery.DiscoveryClient : Can't get a response from http://localhost:8761/eureka/apps/GEGLOB-API-GATEWAY
com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection refused (Connection refused)
at com.sun.jersey.client.apache4.ApacheHttpClient4Handler.handle(ApacheHttpClient4Handler.java:187) ~[jersey-apache-client4-1.19.jar!/:1.19]
at com.sun.jersey.api.client.filter.GZIPContentEncodingFilter.handle(GZIPContentEncodingFilter.java:123) ~[jersey-client-1.19.jar!/:1.19]
at com.netflix.discovery.EurekaIdentityHeaderFilter.handle(EurekaIdentityHeaderFilter.java:27) ~[eureka-client-1.3.7.jar!/:1.3.7]
at com.sun.jersey.api.client.Client.handle(Client.java:652) ~[jersey-client-1.19.jar!/:1.19]
at com.sun.jersey.api.client.WebResource.handle(WebResource.java:682) ~[jersey-client-1.19.jar!/:1.19]
at com.sun.jersey.api.client.WebResource.access$200(WebResource.java:74) ~[jersey-client-1.19.jar!/:1.19]
at com.sun.jersey.api.client.WebResource$Builder.post(WebResource.java:570) ~[jersey-client-1.19.jar!/:1.19]
at com.netflix.discovery.DiscoveryClient.makeRemoteCall(DiscoveryClient.java:1562) [eureka-client-1.3.7.jar!/:1.3.7]
... 19 common frames omitted
I should have one message in kibana (i use grok to split my message into many fields), but it is not working, my message is splited into many messages like :
message1 : 2017-04-25 10:12:56.366 WARN 2989 --- [DiscoveryClient-InstanceInfoReplicator-0] com.netflix.discovery.DiscoveryClient : Can't get a response from http://localhost:8761/eureka/apps/GEGLOB-API-GATEWAY
message 2 : com.sun.jersey.api.client.ClientHandlerException: java.net.ConnectException: Connection refused (Connection refused)
message 3 : at com.sun.jersey.client.apache4.ApacheHttpClient4Handler.handle(ApacheHttpClient4Handler.java:187) ~[jersey-apache-client4-1.19.jar!/:1.19] ...
I am using last versions of the elk stack.
Thanks in advance!