E, [2017-02-07T21:26:34.425421] ERROR -- : The collection MetricData must not have a size greater than 20. (Aws::CloudWatch::Errors::InvalidParameterValue)
/usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/plugins/raise_response_errors.rb:15:in call' /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/aws-sdk-core/plugins/idempotency_token.rb:18:incall'
/usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/base.rb:207:in block (2 levels) in define_operation_methods' ./kafka_jmx_telemetry:303:inblock (2 levels) in '
./kafka_jmx_telemetry:296:in `each'
i have my sample data like this
My filter was file
E, [%{TIMESTAMP_ISO8601:time}]\s+%{LOGLEVEL:log-level}(?:-|%{USER:auth}) (?::|%{USER:auth})?%{DATA:message}
MATCHED
time 2017-02-07T21:26:34.425421
log-level ERR
auth --
message
after match: : The collection MetricData must not have a size greater than 20. (Aws::CloudWatch::Errors::InvalidParameterValue)
/usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/plugins/raise_response_errors.rb:15:in call' NOT MATCHED. The longest regex prefix matching the beginning of this line is as follows: prefix after match: /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/plugins/raise_response_errors.rb:15:incall'
/usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/aws-sdk-core/plugins/idempotency_token.rb:18:in `call'
I tried multiple ways but dint work for me any idea where i was doing wrong in my filter.