{"action":"created","issue":{"url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/issues/35","labels_url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/issues/35/labels{/name}","comments_url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/issues/35/comments","events_url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/issues/35/events","html_url":"https://github.com/logstash-plugins/logstash-output-rabbitmq/issues/35","id":114798880,"number":35,"title":"Fields are missing in rabbitmq with LS 2.0 (plugin version 3.0.5)","user":{"login":"jakommo","id":6436143,"avatar_url":"https://avatars.githubusercontent.com/u/6436143?v=3","gravatar_id":"","url":"https://api.github.com/users/jakommo","html_url":"https://github.com/jakommo","followers_url":"https://api.github.com/users/jakommo/followers","following_url":"https://api.github.com/users/jakommo/following{/other_user}","gists_url":"https://api.github.com/users/jakommo/gists{/gist_id}","starred_url":"https://api.github.com/users/jakommo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakommo/subscriptions","organizations_url":"https://api.github.com/users/jakommo/orgs","repos_url":"https://api.github.com/users/jakommo/repos","events_url":"https://api.github.com/users/jakommo/events{/privacy}","received_events_url":"https://api.github.com/users/jakommo/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/labels/bug","name":"bug","color":"e11d21"}],"state":"open","locked":false,"assignee":{"login":"andrewvc","id":131427,"avatar_url":"https://avatars.githubusercontent.com/u/131427?v=3","gravatar_id":"","url":"https://api.github.com/users/andrewvc","html_url":"https://github.com/andrewvc","followers_url":"https://api.github.com/users/andrewvc/followers","following_url":"https://api.github.com/users/andrewvc/following{/other_user}","gists_url":"https://api.github.com/users/andrewvc/gists{/gist_id}","starred_url":"https://api.github.com/users/andrewvc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrewvc/subscriptions","organizations_url":"https://api.github.com/users/andrewvc/orgs","repos_url":"https://api.github.com/users/andrewvc/repos","events_url":"https://api.github.com/users/andrewvc/events{/privacy}","received_events_url":"https://api.github.com/users/andrewvc/received_events","type":"User","site_admin":false},"milestone":null,"comments":1,"created_at":"2015-11-03T11:49:43Z","updated_at":"2015-11-03T18:31:16Z","closed_at":null,"body":"With LS 2.0 and plugin version 3.0.5, only the message is pushed to rabbitmq but not the other fields.\r\nIn rubydebug the fields show up but are missing in rabbitmq.\r\n\r\nExample config:\r\n\r\n```\r\ninput {\r\n  file {\r\n    sincedb_write_interval => 5\r\n    path => [ \"/home/jakommo/ELASTIC/ISE/14912/test/messages\" ]\r\n    type => \"messages\"\r\n    sincedb_path => \"/dev/null\"\r\n    start_position => \"beginning\"\r\n  }\r\n}\r\n\r\nfilter {\r\n  if [type] == \"messages\" {\r\n     grok {\r\n       match  => [ \"message\", \"%{NUMBER:priority} %{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\\[   %{POSINT:syslog_pid}\\])?: %{GREEDYDATA:syslog_message}\" ]\r\n       }\r\n  }\r\n}\r\n\r\noutput {\r\n  stdout { codec => rubydebug }\r\n  rabbitmq {\r\n        exchange        => \"logstash_exchange\"\r\n        host            => \"localhost\"\r\n        exchange_type   => \"direct\"\r\n        key             => \"logstash\"\r\n        durable         => true\r\n        persistent      => true\r\n        user            => \"XXX\"\r\n        password        => \"XXX\"\r\n  }\r\n}\r\n```\r\n\r\nExample log line:\r\n\r\n```\r\n6 Nov 1 15:47:29 host01 ntpd[47533]: 0.0.0.0 c059 01 restart\r\n```\r\n\r\nPayload in rabbitmq:\r\nLoaded with 1.5.4 (plugin version 1.1.1)\r\n\r\n```\r\n{\"message\":\"6 Nov 1 15:47:29 host01 ntpd[47533]: 0.0.0.0 c059 01 restart \",\"@version\":\"1\",\"@timestamp\":\"2015-11-03T11:30:31.156Z\",\"host\":\"es-jre\",\"path\":\"/home/jakommo/ELASTIC/ISE/14912/test/messages\",\"type\":\"messages\",\"priority\":\"6\",\"syslog_timestamp\":\"Nov 1 15:47:29\",\"syslog_hostname\":\"host01\",\"syslog_program\":\"ntpd[47533]\",\"syslog_message\":\"0.0.0.0 c059 01 restart \"}\r\n```\r\n\r\nLoaded with 2.0 (plugin version 3.0.5)\r\n\r\n```\r\n2015-11-03T11:31:13.379Z es-jre 6 Nov 1 15:47:29 host01 ntpd[47533]: 0.0.0.0 c059 01 restart \r\n```\r\n\r\nIn both cases rubydebug is:\r\n\r\n```\r\n{\r\n             \"message\" => \"6 Nov 1 15:47:29 host01 ntpd[47533]: 0.0.0.0 c059 01 restart \",\r\n            \"@version\" => \"1\",\r\n          \"@timestamp\" => \"2015-11-03T11:31:13.379Z\",\r\n                \"host\" => \"es-jre\",\r\n                \"path\" => \"/home/jakommo/ELASTIC/ISE/14912/test/messages\",\r\n                \"type\" => \"messages\",\r\n            \"priority\" => \"6\",\r\n    \"syslog_timestamp\" => \"Nov 1 15:47:29\",\r\n     \"syslog_hostname\" => \"host01\",\r\n      \"syslog_program\" => \"ntpd[47533]\",\r\n      \"syslog_message\" => \"0.0.0.0 c059 01 restart \"\r\n}\r\n```\r\n\r\nSo the fields are parsed correctly but not pushed to rabbitmq"},"comment":{"url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/issues/comments/153447010","html_url":"https://github.com/logstash-plugins/logstash-output-rabbitmq/issues/35#issuecomment-153447010","issue_url":"https://api.github.com/repos/logstash-plugins/logstash-output-rabbitmq/issues/35","id":153447010,"user":{"login":"andrewvc","id":131427,"avatar_url":"https://avatars.githubusercontent.com/u/131427?v=3","gravatar_id":"","url":"https://api.github.com/users/andrewvc","html_url":"https://github.com/andrewvc","followers_url":"https://api.github.com/users/andrewvc/followers","following_url":"https://api.github.com/users/andrewvc/following{/other_user}","gists_url":"https://api.github.com/users/andrewvc/gists{/gist_id}","starred_url":"https://api.github.com/users/andrewvc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrewvc/subscriptions","organizations_url":"https://api.github.com/users/andrewvc/orgs","repos_url":"https://api.github.com/users/andrewvc/repos","events_url":"https://api.github.com/users/andrewvc/events{/privacy}","received_events_url":"https://api.github.com/users/andrewvc/received_events","type":"User","site_admin":false},"created_at":"2015-11-03T18:31:16Z","updated_at":"2015-11-03T18:31:16Z","body":"@jakommo the issue here seems to be that before the default codec was JSON, and that no longer is the case. I do think we should fix this and restore the `json` codec.\r\n\r\nA workaround for now would be to explicitly set the codec to `json`."}}