Questions tagged [graylog2]

Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.

279 questions
1
vote
1 answer

Forward .log file via nxlog to Graylog2 VM server

I'm at the phase of just try with Graylog2. My goal is to view the application logs via graylog2 webpage. The application is hosted on windows server, log file is ABC.log. nxlog service is configured with multiline header to force Exception messages…
YDD9
  • 135
  • 2
  • 10
1
vote
1 answer

Elasticsearch Cluster health is yellow

My elasticsearch cluster "graylog2" health status is showing yellow, but in web-interface it is showing green. I could see the following lines in Graylog web-interface. "1 indices with a total of 26 messages under management, current write-active…
1
vote
0 answers

How to fix "No Graylog servers available. Cannot log in" in Graylog?

After applied "echo -n password | sha256sum" now I am getting issue like "No Graylog servers available. Cannot log in". Could you find screen shot and server.conf file and web.conf files script. In the server.conf file: password_secret =…
user3624736
  • 21
  • 1
  • 1
  • 9
1
vote
1 answer

Change Graylog UI

I have just setup Graylog server, but I want to change something about the login screen in the web interface. Is it possible to change the UI for graylog-web?
1
vote
0 answers

Logstash metrics on http response code -> logstash

I am trying to do a counter of HTTP response codes using metrics in Logstash. I tried many options but nothing works. I want to send metrics result to Graylog. I tried this in filter file, using debug mode in logstash I can see 'metrics' buy…
1
vote
0 answers

Configuring Elasticsearch with docker install

The only mention of configuring ES in the docker page is that one can pass in an ES_MEMORY field http://docs.graylog.org/en/1.1/pages/installation/docker.html I've started a docker Graylog2, and am getting the 'Elasticsearch nodes with too low open…
djb
  • 1,635
  • 3
  • 26
  • 49
1
vote
1 answer

Graylog2 web interface doesn't show logs/messages even though the data is in Elasticsearch

So, I have installed Graylog2, Elasticsearch and MongoDB. All of them are running on same machine. The thing is log collection is working, which I can verify by querying Elasticsearch but Graylog2 web interface doesn't show any messages. Here is…
chhantyal
  • 11,874
  • 7
  • 51
  • 77
1
vote
1 answer

Problems with Graylog when cycling deflector

I am experiencing some sort of strange behavior of our production graylog system. Every time the graylog server cycles the deflector (we have a limit of 2.5 million documents per index), it stops indexing messages and raises a lot of indexing…
1
vote
0 answers

Convert log4j config to log4perl config

How do I convert following log4j config to log4perl config log4j.appender.graylog2 = org.graylog2.log.GelfAppender log4j.appender.graylog2.graylogHost = somehostname log4j.appender.graylog2.graylogPort = XXXX #…
Abhijeet
  • 266
  • 1
  • 3
  • 13
1
vote
1 answer

How do you install the HipChat plugin for GrayLog2?

I was directed to the Graylog2 HipChat Plugin available HERE and followed the (rather simple) steps regarding its installation. Unfortunately after restarting Graylog2-server nothing seems to be picked up regarding the plugin. Stream settings do not…
David 'the bald ginger'
  • 1,296
  • 3
  • 20
  • 38
1
vote
1 answer

Jenkins Error Log in GrayLog2

We are noticing that any errors that occur in our Jenkins service go unattended until it is too late and we were looking for a way to get our Jenkins error log on our server into GrayLog2. Are there any plugins or scripts that will handle this for…
Brandon
  • 10,744
  • 18
  • 64
  • 97
1
vote
1 answer

Apache ErrorLog write log and execute Python script

I'm trying to write Apache 2.4 errors to an error log and sending them to a Graylog2 server using a Python script. Looking at examples such as http://www.fnal.gov/docs/products/apache/syslog_logs_notes.html and…
user2511309
  • 309
  • 3
  • 18
1
vote
1 answer

elasticsearch ttl force delete old messages

Im set TTL as in manual, but elasticsearch documentation said that messages older then TTL time will be not affected, how can i force deletion of older messages? Or maybe exists some method to delete messages older then 30 days?
user3484021
  • 27
  • 1
  • 10
1
vote
1 answer

How to install and run graylog2 without root privilege nor write permission to /etc

Following the current default installation instructions for graylog2 it appears as if it assumes the installation is using user root. It seems it assumes freehand access to /etc which I don't really like nor think it should be necessary. E.g. upon…
matanster
  • 15,072
  • 19
  • 88
  • 167
1
vote
1 answer

Using GELF with v0.20.0-preview.7?

A couple months ago, I installed Graylog2 v0.13.0-rc.1 successfully along with Logstash 1.2.1 to send logs through the dedicated GELF output. Everything was working nicely. Today, I've installed Graylog2 v0.20.0-preview.7 but I can't make GELF work.…
David
  • 2,603
  • 4
  • 18
  • 28