Questions tagged [gelf]

The Graylog Extended Log Format (GELF) is a log format.

The Extended Log Format (GELF) is a log format that avoids the shortcomings of classic plain syslog:

  • Limited to length of 1024 bytes – Not much space for payloads like backtraces
  • No data types in structured syslog. You don’t know what is a number and what is a string.
  • The RFCs are strict enough but there are so many syslog dialects out there that you cannot possibly parse all of them.
  • No compression

There are a number of software libraries that can be used to produce logs in GELF, e.g. .

Links:

87 questions
1
vote
0 answers

Logstash gelf logs lost

(I already asked this questions in Elastic forum, but as I have received no answer, I repost it here) We have 3 hosts with Logstash 2.4.1 and Elasticsearch 2.4.1 on each host, with Logstash configured to receive gelf and syslog/tcp logs. Sometimes…
Jazz
  • 5,747
  • 5
  • 43
  • 55
1
vote
1 answer

Rails Broadcasting log to Graylog Does not work

I want to forward all logs to graylog server plus I want to maintain my actual Rails Log. I am using ruby gelf gem. https://github.com/Graylog2/gelf-rb and lograge. In my application.rb I have the code if Rails.env.in? ['production',…
tessie
  • 964
  • 3
  • 14
  • 24
1
vote
1 answer

Symfony & ELK : which encoding should I use with gelf?

I'm trying to monitor a symfony app with the ELK stack. I'm shipping my logs to logstash with the following configuration : monolog: handlers: main: type: gelf publisher: hostname: elk-host …
jiboulex
  • 2,963
  • 2
  • 18
  • 28
1
vote
1 answer

How to count messages with different or indifferent field values with graylog?

I'm using graylog to visualize some http request data. I would like to have a widget which shows how many different IPv4 addresses have been accessing a website within the given time range. The IPv4 address gets saved within a log entry in the…
whitenexx
  • 1,350
  • 2
  • 25
  • 53
0
votes
0 answers

How can I create an apisix tcp-logger plugin to send messages to graylog?

I have an apache/apisix stack running on docker where I want to create a tcp-logger plugin to send log messages to graylog, which I'm doing through the api-six dashboard. Following is the gelf which I can successfully run from my local…
Jays
  • 91
  • 7
0
votes
0 answers

Graylog is not recording string values of metadata key

This is my curl command, it send a message to Graylog that I can see on the dashboard: curl -X POST -H 'Content-Type: application/json' -d '{"short_message":"test", "my_key":"1234" }' http://127.0.0.1:12201/gelf However, should I change the value…
temuri
  • 2,767
  • 5
  • 41
  • 63
0
votes
0 answers

Quarkus gelf logging. How to log application name

I would like to log application name and version (from pom.xml file) with quarkus-gelf logging to send logs to logstash. I found a way to use "additional-field", is there another option to do same, but shorter? Or some way to not duplicate "version"…
Degote
  • 1
  • 1
0
votes
1 answer

Configuring Azure Activity Logs to Graylog / ELK

I have exported Azure Activity Logs to Blob Storage. I am using Logstash 8.7.1 version along with gelf output using docker-compose to ship these logs to Graylog using GelfUDP. For Input of Logstash, using azure_blob_storage plugin of…
Neelesh Gurjar
  • 65
  • 1
  • 10
0
votes
0 answers

How to Append logs 2 different path seperately via Log4j1.x in Java

It is about java project logging, currently log4j1 is used and logging is stored in Tomcat log files under C Drive. I'm plannig to use graylog2 (gelf.jar) from now onward. I have started and achieved to write my logs to docker host. But whole logs…
0
votes
1 answer

Configuration for sending Docker logs to a locally installed ELK using Gelf

I have my ELK deployed on an ec2 instance and a dockerized application running on a different instance. I am trying to use gelf to collect the different service logs and send to logstash. But my current configuration doesn't work. Here's my…
Didi
  • 431
  • 1
  • 4
  • 13
0
votes
1 answer

Save job traces from Gitlab Runner and redirect to Graylog

Is that possible to save/redirect Gitlab job traces(like for example this)? My Gitlab runners work in docker containers and I would like to save logs from executed jobs to syslog on the machine, then forward them to Graylog server. I was thinking…
Matt
  • 19
  • 4
0
votes
0 answers

fluent-bit when trying to use OUTPUT gelf getting connection timeout after 10 seconds

We are trying to get EKS logs to Graylog. Deployed, Graylog using Helm Charts. We used MongoDB, Elasticsearch, and Graylog to deploy Graylog. Graylog works fine. After Graylog was created. To get EKS logs, we deployed Fluent-bit. To send logs to…
Veera
  • 67
  • 1
  • 3
  • 10
0
votes
1 answer

Adding logstash-gelf log4j2 plugin to Karaf application

I have a Karaf (v4.2.15) application using the default PAX logging with associated config file org.ops4j.pax.logging.cfg. I am trying to update my graylog appender from log4j v1, in an older version of the application, to the current log4j2…
JamesP
  • 602
  • 6
  • 12
0
votes
1 answer

How to send logs from Gitlab Pipeline jobs to Graylog?

I need to send logs like those from jobs executed in Gitlab pipeline to Graylog. Is it possible to do it straight from Gitlab runner containers? I have a docker installed on my Virtual Machine with one Gitlab runner container and I would like to…
Matt
  • 19
  • 4
0
votes
1 answer

Datalust Seq Ingestion failed: Invalid URI: The URI scheme is not valid

I'm trying to collect logs from docker containers by Datalust Seq. All containers are running on the same host. I tried to follow the official recomendations. seq: image: datalust/seq:latest container_name: seq restart: unless-stopped …
vatavale
  • 1,470
  • 22
  • 31