Questions tagged [gelf]

The Graylog Extended Log Format (GELF) is a log format.

The Extended Log Format (GELF) is a log format that avoids the shortcomings of classic plain syslog:

  • Limited to length of 1024 bytes – Not much space for payloads like backtraces
  • No data types in structured syslog. You don’t know what is a number and what is a string.
  • The RFCs are strict enough but there are so many syslog dialects out there that you cannot possibly parse all of them.
  • No compression

There are a number of software libraries that can be used to produce logs in GELF, e.g. .

Links:

87 questions
2
votes
0 answers

Send logs using RELP in GELF format

I have the task to send logs from Java application to remote server using RELP protocol and in GELF format. Can you please suggest libraries that I can use in Java application?
2
votes
1 answer

Is it possible to relay the logs from a docker container to more than one server using gelf?

Currently, I have a docker container sending logs to a Logstash using gelf. Pretty standard configuration set in the docker-compose file used to create the container. I'm investigating the feasibility of sending the logs of a docker container to…
versvs
  • 643
  • 2
  • 12
  • 30
2
votes
0 answers

TraceId from de.siegmar.logbackgelf.GelfUdpAppender to graylog

I am using de.siegmar.logbackgelf.GelfUdpAppender from pushing logs to graylog but TraceId is not coming into graylog. Has tried with putting logging_correlation_id:%X{X-B3-TraceId:-} but instead of tracId,…
Ravat Tailor
  • 1,193
  • 3
  • 20
  • 44
2
votes
0 answers

Graylog: Bad GELF UDP performance

I have a Graylog installation that can handle well over 25.000 msg/sec. I am now experimenting with setting up a dedicated Logstash cluster. So something like this: Filebeat (n hosts) -> Logstash Cluster -> Graylog The biggest issue now is that I…
Frizz
  • 2,524
  • 6
  • 31
  • 45
2
votes
0 answers

Nginx UDP load-balance hash from first 8 bytes

I'm using nginx to load-balance logger UDP traffic in front of a set of graylog servers. Large log messages are broken apart into chunks then pieced back together using a message id of 8 bytes starting after a 2 byte header as explained in the GELF…
Michael
  • 3,498
  • 5
  • 27
  • 32
2
votes
2 answers

How can I programmatically log numeric fields into Graylog?

The situation I write libraries to work against a computing server. I am logging computing times (start and stop of a job, for example). I want to log this values independently of the log framework configuration of the client application. I have…
manuelvigarcia
  • 1,696
  • 1
  • 22
  • 32
2
votes
2 answers

Unable to connect docker container to logstash via gelf driver

Hi guys i'm having trouble to send my server container logs to my ELK stack. No input is sent to logstash so i'm unable to set kibana index for collecting logs. I think my problem is in the port settings. Here is the docker-compose yml for the LAMP…
javal88
  • 1,188
  • 3
  • 17
  • 29
2
votes
1 answer

GELF logging driver with Windows Containers

I'm trying get an ELK stack up (Elastic Search, Logstash and Kibana) and would like to get the GELF logging driver to forward events to Logstash, however whenever I run my container with the specified driver I get docker: Error response from daemon:…
Ryan
  • 4,354
  • 2
  • 42
  • 78
1
vote
0 answers

Gelf logging with docker-compose

I've googled the f out of this. here is the log driver config for my docker container in the compose file driver: gelf options: gelf-address: "http://graylog:12201" I created a GELF HTTP input in the admin console. I know…
Isaac Ray
  • 1,351
  • 9
  • 17
1
vote
1 answer

Unable to get log messages from GELF appender (graylog) - spring

Graylog web page is running as below: Following the documentation for spring boot: graylog-springboot However, nothing shows in the result. Could you Please advise me if you know what im doing wrong. I have created log4j.xml file as…
gippo
  • 39
  • 5
1
vote
1 answer

UberZap with gelf driver writes whole log into message field

I'm using uber-zap for logging and I'm trying to log to graylog in GELF format. Log is written successfully but the whole json is being sent as message key of log record. message:…
Ali Farhoudi
  • 5,350
  • 7
  • 26
  • 44
1
vote
0 answers

Missing zero byte (\0) character at end of GELF TCP message from docker container's gelf driver

We are using Logback for our Spring boot microservice and pushing logs to graylog using docker logging driver - gelf. We have configured the logging driver to use tcp route to push logs to graylog as the same can be reliable over udp. From the…
sportymsk
  • 43
  • 1
  • 8
1
vote
1 answer

Logging with JSON GELF format in Spring Boot

I'm using Spring Boot and would like to have this code: LOG.info("Scheduled appointment for user 12345 [appointment ID 100]"); Produce the following log message in JSON GELF format: { "version": "1.1", "host": "hostname.ec2.internal", …
kernelpanic
  • 1,158
  • 5
  • 17
  • 36
1
vote
0 answers

AttributeError: module 'graypy' has no attribute 'GELFRabbitHandler'

I add LOGGING to my Django project settings: LOGGING = { 'handlers': { 'graylog_rabbit': { 'level': 'INFO', 'class': 'graypy.GELFRabbitHandler', 'url': os.getenv('LOG_RABBITMQ_URL'), …
Kasra Najafi
  • 560
  • 5
  • 11
1
vote
1 answer

Docker logs with log-driver

I am running a new container using the following command: docker run -d --log-driver=gelf --log-opt gelf-address=tcp:// nginx Looking at the documentation, this should send the logs to my_log_server, and if I run the docker logs…
Federico Bellini
  • 365
  • 1
  • 7
  • 18