Ran your ERROR log through our cluster and did not see any issue.
- OS: Amazon Linux 2
- Promtail version: 2.8.2
- Loki version: 2.8.0
Here is the configuration I used ( note that I did not have to specify encoding, and I added a block to parse the timestamp:
---
server:
disable: true
positions:
filename: /tmp/positions.yml
clients:
- url: <LOKI_URL>
basic_auth:
username: <USERNAME>
password: <PASSWORD>
external_labels:
app: tonytest
scrape_configs:
- job_name: tonytest
static_configs:
- targets:
- localhost
labels:
__path__: /tmp/test/ERRORLOG
job: tonytest
pipeline_stages:
- regex:
expression: '^(?P<timestamp>\S* \S*)'
- timestamp:
source: timestamp
format: '2006-01-02 15:04:05.00'
I did not manipulate the file at all. It was downloaded and unzipped directly on the agent host. File output from server:
[root@node0 test]# file ./ERRORLOG
./ERRORLOG: Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
Screenshot:
