Hello, logstash keeps failing and spitting out this error:
NoMethodError: undefined method `join' for "_grokparsefailure":String receive at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-gelf-1.0.0/lib/logstash/outputs/gelf.rb:178 handle at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/outputs/base.rb:88 output_func at (eval):47 outputworker at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:244 start_outputs at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:166
Here's a gist of my logstash configs: https://gist.github.com/anonymous/0f05229b611b0a9d68592602d78ea32b
We're sending logs from our production app servers to a central VM in our production environment, and from there we forward them to a graylog server in our local environment.
We have logstash 1.4.2_modified on the app servers and logstash 1.5.4 on the central 'logshipper' VM.
Logstash on the central 'logshipper' VM crashes when I add a new input file to the app servers' logstash config and do some grokking and mutating. If I leave this out, logstash doesn't crash.