Issue with logstash and NNT syslog parsing


I am using logstash to collect logs sent by the NNT Change Tracker Generation 7.

It all configures so I can see message incoming when performing a test but messages are unreadable. I get for instance :
"message" => "\u0016\u0003\u0001\u0000[\u0001\u0000\u0000W\u0003\u0001\n��c��\u000390a\�b���}�O�y��r�\t����c\u0000\u0000\f\u00005\u0000/\u0000\n",
"@timestamp" => 2019-02-21T16:03:15.961Z,
"host" => "",
"facility_label" => "kernel",
"tags" => [
[0] "_grokparsefailure_sysloginput"

The application support team told me that :
I've had some more feedback from the development team and Change Tracker uses the following: "ASCII (7-bit) character set"

but I have not been able to find the right character set in logstash config (I used several including "us-ascii")

do you have any issue what I can use to be able to get my file ?



This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.