Hi @H S Thanks for your answer, i have increased resources on my Full Dev VM and used Metron UI to create new sensor, currently it works. But i have a new problem, Elasticsearch not index logs. I don't know if logs correctly reach Elasticsearch because in Storm UI, in parserBolt -> Output stats (for my topic), i don't have anythings. (Screen Below). Has anyone ever had a problem with Kafka Stream ? Where logs correctly pass thought NiFi, correctly receive by Kafka and parse by Grok but are not redirect to Elasticsearch. bolt-logs.png ... View more

Hello @H S, Have you find a solution for Grok parsing Error : java.lang.IllegalStateException: Grok parser Error: Grok statement produced a null message. Original message was: {"hostname":"my.machine","timestamp":"1490746284"} and the parsed message was: {} I actually have the same error with a very simple Grok pattern : PARSE_TXT %{DATA:email}\:%{DATA:name} For the moment, i just try to parse the following text : toto:toto tata:tata titi:titi I have tested this on the grok constructor website: http://grokconstructor.appspot.com/ and it correctly match. Anyone already had this error ? My parser configuration : { "parserClassName": "org.apache.metron.parsers.GrokParser", "sensorTopic": "parse_txt", "parserConfig": { "grokPath": "/apps/metron/patterns/parse_txt", "patternLabel": "PARSE_TXT" } } Thanks ! ... View more