Is this compatible with the latest Logstash? about postfix-grok-patterns HOT 3 CLOSED

Patterns are tested with logstash 2 grok patterns, but i haven't tested the complete logstash config with 2. However, the problematic line (according to your error message), has nothing different from other lines in the file (f.i. l26 or l19).

Could you verify that you copy/pasted the file correctly?

As far as kibana: should not matter, this config does not interact with it at all (it just produces data that can be used with it).

from postfix-grok-patterns.

For good measure, I just installed logstash 2.1 on ubuntu trusty LTS using the elastic repo. adding the 50-filter-postfix.conf foile to the config directery and then running a configtest does not report any errors here:

$ /opt/logstash/bin/logstash --config /etc/logstash/conf.d/50-filter-postfix.conf --configtest
Configuration OK
$ dpkg -l logstash
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name           Version      Architecture Description
+++-==============-============-============-=================================
ii  logstash       1:2.1.1-1    all          An extensible logging pipeline

I think you made a copy/paste error

from postfix-grok-patterns.

I did a wget of the file in the dir. But i will try the test thingie :-)

from postfix-grok-patterns.