{"action":"created","issue":{"url":"https://api.github.com/repos/fluent/fluentd/issues/546","labels_url":"https://api.github.com/repos/fluent/fluentd/issues/546/labels{/name}","comments_url":"https://api.github.com/repos/fluent/fluentd/issues/546/comments","events_url":"https://api.github.com/repos/fluent/fluentd/issues/546/events","html_url":"https://github.com/fluent/fluentd/issues/546","id":56014332,"number":546,"title":"in_tail and regex format","user":{"login":"florentvaldelievre","id":144849,"avatar_url":"https://avatars.githubusercontent.com/u/144849?v=3","gravatar_id":"","url":"https://api.github.com/users/florentvaldelievre","html_url":"https://github.com/florentvaldelievre","followers_url":"https://api.github.com/users/florentvaldelievre/followers","following_url":"https://api.github.com/users/florentvaldelievre/following{/other_user}","gists_url":"https://api.github.com/users/florentvaldelievre/gists{/gist_id}","starred_url":"https://api.github.com/users/florentvaldelievre/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/florentvaldelievre/subscriptions","organizations_url":"https://api.github.com/users/florentvaldelievre/orgs","repos_url":"https://api.github.com/users/florentvaldelievre/repos","events_url":"https://api.github.com/users/florentvaldelievre/events{/privacy}","received_events_url":"https://api.github.com/users/florentvaldelievre/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-30T09:59:40Z","updated_at":"2015-01-30T18:11:20Z","closed_at":"2015-01-30T18:11:20Z","body":"Hello,\r\n\r\nMy regex is not being recognized by fluentd \r\ntd-agent 0.10.58\r\nruby 2.1.5p273 (2014-11-13) [x86_64-linux-gnu]\r\n\r\nIt works well with fluentular tool: <a href=\"http://fluentular.herokuapp.com/parse?regexp=%28%3F%3Ctime%3E%5B%5E+%5D*+%5B%5E+%5D*+%29+%28%3F%3Cclass%3E%5B%5E+%5D%2B%29+*%28%3F%3Clevel%3E%5B%5E+%5D%2B%29.*-+%28%3F%3Cmessage%3E%28%3F%3A%28%3F%21%5Cn%5Cd%7B4%7D%28%3F%3A-%5Cd%7B2%7D%29%7B2%7D%29%5B%5Cs%5CS%5D%29*%29&input=2015-01-28+18%3A48%3A37%2C809++proxy.pojo.javassist.JavassistLazyInitializer+++++++ERROR++-+HHH000142%3A+Javassist+Enhancement+failed%3A+hibe.core.communication.feed.Post%0D%0Ajava.lang.RuntimeException%3A+duplicate+method%3A+attach+in+hibe.core.communication.feed.Post_%24%24_javassist_64%0D%0A++++++++at+javassist.util.proxy.ProxyFactory.createClass3%28ProxyFactory.java%3A509%29%0D%0A++++++++at+javassist.util.proxy.ProxyFactory.createClass2%28ProxyFactory.java%3A486%29%0D%0A++++at+java.util.concurrent.ThreadPoolExecutor.runWorker%28ThreadPoolExecutor.java%3A1142%29%0D%0A++++++++at+java.util.concurrent.ThreadPoolExecutor%24Worker.run%28ThreadPoolExecutor.java%3A617%29%0D%0A++++++++at+java.lang.Thread.run%28Thread.java%3A745%29%0D%0ACaused+by%3A+javassist.bytecode.DuplicateMemberException%3A+duplicate+method%3A+attach+in+hibe.core.communication.feed.Post_%24%24_javassist_64%0D%0A++++++++at+javassist.bytecode.ClassFile.testExistingMethod%28ClassFile.java%3A637%29%0D%0A++++++++at+javassist.util.proxy.ProxyFactory.createClass3%28ProxyFactory.java%3A497%29%0D%0A++++++++...+80+more%0D%0A2015-01-28+18%3A48%3A37%2C823++hibernate.proxy.pojo.BasicLazyInitializer+++++++++++ERROR++-+Javassist+Enhancement+failed%3A+hibe.core.communication.feed.Post%0D%0Ajava.lang.RuntimeException%3A+duplicate+method%3A+attach+in+hibe.core.communication.feed.Post_%24%24_javassist_65%0D%0A++++++++at+javassist.util.proxy.ProxyFactory.createClass3%28ProxyFactory.java%3A509%29%0D%0A++++++++at+javassist.util.proxy.ProxyFactory.createClass2%28ProxyFactory.java%3A486%29%0D%0A++++++++at+java.util.concurrent.ThreadPoolExecutor%24Worker.run%28ThreadPoolExecutor.java%3A617%29&time_format=%25Y-%25m-%25d+%25H%3A%25M%3A%25S%2C%25L\">fluentular demo link</a>\r\nIt also works well with Rubular: <a href=\"http://www.rubular.com/r/GrL3XQSg8o\">rubular demo link</a>\r\n\r\n\r\ntd-agent.log returns:\r\n````\r\n2015-01-30 09:46:00 +0000 fluent.warn: {\"message\":\"pattern not match: \\\"java.lang.RuntimeException: duplicate method: attach in hibe.core.communication.feed.Post_$$_javassist_64\\\"\"}\r\n2015-01-30 09:46:00 +0000 fluent.warn: {\"message\":\"pattern not match: \\\"        at javassist.util.proxy.ProxyFactory.createClass3(ProxyFactory.java:509)\\\"\"}\r\n2015-01-30 09:46:00 +0000 fluent.warn: {\"message\":\"pattern not match: \\\"        at javassist.util.proxy.ProxyFactory.createClass2(ProxyFactory.java:486)\\\"\"}\r\n...\r\n````\r\n\r\nMy setup is the following:\r\n\r\n````\r\n<source>\r\n type tail\r\n path  /var/log/tomcat7/hibe-webapp.log\r\n pos_file /tmp/tomcat.pos\r\n tag tomcat.catalina.log\r\n refresh_interval 5\r\n format /(?<time>[^ ]* [^ ]* ) (?<class>[^ ]+) *(?<level>[^ ]+).*- (?<message>(?:(?!\\n\\d{4}(?:-\\d{2}){2})[\\s\\S])*)/\r\n time_format %Y-%m-%d %H:%M:%S,%L\r\n</source>\r\n\r\n<match **>\r\ntype stdout\r\n</match>\r\n````\r\n\r\nDo you have a clue ?\r\n\r\nMany thanks"},"comment":{"url":"https://api.github.com/repos/fluent/fluentd/issues/comments/72244228","html_url":"https://github.com/fluent/fluentd/issues/546#issuecomment-72244228","issue_url":"https://api.github.com/repos/fluent/fluentd/issues/546","id":72244228,"user":{"login":"repeatedly","id":16928,"avatar_url":"https://avatars.githubusercontent.com/u/16928?v=3","gravatar_id":"","url":"https://api.github.com/users/repeatedly","html_url":"https://github.com/repeatedly","followers_url":"https://api.github.com/users/repeatedly/followers","following_url":"https://api.github.com/users/repeatedly/following{/other_user}","gists_url":"https://api.github.com/users/repeatedly/gists{/gist_id}","starred_url":"https://api.github.com/users/repeatedly/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/repeatedly/subscriptions","organizations_url":"https://api.github.com/users/repeatedly/orgs","repos_url":"https://api.github.com/users/repeatedly/repos","events_url":"https://api.github.com/users/repeatedly/events{/privacy}","received_events_url":"https://api.github.com/users/repeatedly/received_events","type":"User","site_admin":false},"created_at":"2015-01-30T18:11:20Z","updated_at":"2015-01-30T18:11:20Z","body":"Your logs have multiline stacktrace but your configuration is only for single line.\r\nin_tail tries to match regex at each line unlike fluentular / rubular.\r\nSo you should multiline mode instead. See multiline section: http://docs.fluentd.org/articles/in_tail\r\n\r\nLastly, if you have a question, please use ML first :) https://groups.google.com/d/forum/fluentd"}}