Hello ,

     I'm trying get specific data from some logs of hadoop with REGEX and I recieved this error: ERROR invalid keyword: Output at C:\Program Files (x86)\nxlog\conf\nxlog.conf:45

      Here is my config file:

define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

<Extension gelf>
    Module         xm_gelf
<Extension fileop>
    Module         xm_fileop
<Extension json>
    Module      xm_json
<Extension multi>
    Module      xm_multiline
    HeaderLine  /^(\d+-\d+-\d+\s\d+:\d+:\d+,\d+)/
    EndLine        /(.*)/
<Input hadoop>
  Module         im_file
  File             "E:\\Hadoop\\test\\*.*"
  SavePos         TRUE
  Recursive     TRUE
  InputType        multi
  Exec      if $raw_event =~/^(\d+-\d+-\d+\s\d+:\d+:\d+,\d+)\s(?:INFO|ERROR|WARN)\s(org.apache.hadoop.\w+.\w+):\s(.*)/g\
                $Time = $1;\
                $CStatus = $2;\
                $Process = $3;\
                $Process_result = $4;\

<Output graylog>
    Module      om_udp
    Port        12201
    OutputType    GELF
    #Use the following line for debugging (uncomment the fileop extension above as well)
    #Exec file_write("C:\\Program Files (x86)\\nxlog\\data\\nxlog_output.log", $raw_event);

<Route eventlog>
    Path        hadoop => graylog

Anyone know what is bad in this config file?.

THank you.

AskedFebruary 4, 2016 - 9:00pm

Answer (1)