Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.
Questions tagged [graylog2]
279 questions
0
votes
0 answers
Graylog connecting to existing elasticsearch shows 503
Graylog v4.0.7
ElasticSearch v7.7
MongoDb v4.4
We are setting up Graylog in our kubernetes cluster. Graylog can connect to MongoDB server from another cluster using LB. When we connect our Graylog to ElasticSearch which is in different cluster…

Yejin
- 541
- 2
- 15
- 32
0
votes
1 answer
Why this extracted Graylog field is not showing in my widget?
I am using a pipeline connected to a .csv document, to create a new field in my windows logs on Graylog.
As you can see from the screenshot, I can see the field in every log, but when I click on "show top values" to create a new widget, Graylog…

Lorenzo
- 180
- 8
0
votes
1 answer
How to change a numeric ID into a sentence in Graylog using pipelines?
I am trying to "beautify" the data I receive from some windows logs on Graylog. My idea is to change the windows log ID from a number to the actual definition for that ID. For example: I receive a log with ID 4625, I want to show in my widget "An…

Lorenzo
- 180
- 8
0
votes
1 answer
Graylog not showing logs or messages from client
Hell There,
I am new to graylog, we have configured client with below entry in configuration file
*.* @1*.**.88.**:514;RSYSLOG_SyslogProtocol23Format (we are using 514 port)
even we tried to to send some logs to graylog server with
echo -n -e '{…

Samurai
- 121
- 1
- 4
- 15
0
votes
2 answers
How to search today only data in Graylog
I found that it's extremely hard to search "today-only" message in Graylog. Here is what I've tried so far:
Using keyword: today 00:00:00 +0800 to today 23:59:59 +0800
Using timestamp:["now/d" to "now+1d/d"] in query and select search all…

user2131907
- 342
- 1
- 6
- 14
0
votes
1 answer
Linux filebeat input collector for Graylog
I'm try to configure a Graylog collector [filebeat] for Liunx. The part that I'm having an issue with is the paths:
The path I want to collect logs from has many log files contained in it. I only want to collect the files that have the format…

RClose
- 13
- 4
0
votes
1 answer
Retrieving the name of the method from which HTTP call was made using an Interceptor
I am using the Spring ClientHttpRequestInterceptor to capture all outgoing HTTP calls from my applications in order to log the data. In addition to the data that I am already collecting in the interceptor, I want to somehow fetch the name of the…

Tabish Mir
- 717
- 6
- 26
0
votes
2 answers
Where does graylog save dashboard / widget design?
I want to backup the design of my graylog dashboard and specific widgets. Where does graylog store them?

Scholar
- 463
- 5
- 19
0
votes
1 answer
Graylog error on Web Interface in .js file
I have a problem and I believe it may be due to my installation with HTTPS, I came to this conclusion simply because when installing over HTTP this does not happen, ie the problem is certainly due to the lack of any specific configuration in my…

Luiz Negrini
- 656
- 10
- 32
0
votes
2 answers
graylog's logs show ERROR information: ... cause io.netty.channel.unix.Errors$NativeIoException: syscall:read(..) failed: Connection reset by peer)
I use graylog to collect message, and i have a problem that graylog's logs show so many same ERROR messages like this :
2019-10-24 02:01:38,731 ERROR: org.graylog2.plugin.inputs.transports.AbstractTcpTransport - Error in Input [GELF…

wlarein
- 1
- 3
0
votes
1 answer
Running Graylog behind Traefik
I have been using Traefik as a reverse proxy for several containers managed through docker compose. It has been working well but I'm having some difficulty getting graylog running properly behind it.
This config (excerpt of the complete file,…

Philip O'Brien
- 4,146
- 10
- 46
- 96
0
votes
1 answer
Unable to Log Python List Objects as Message in Graylog
I am trying to send Python List as Log Message to Graylog. The approach that i am using is "Sending GELF messages via HTTP using curl" mentioned in http://docs.graylog.org/en/2.4/pages/gelf.html
But when i send data as below:
curl -X POST -H…

ankit
- 1,499
- 5
- 29
- 46
0
votes
1 answer
graylog pipeline rules to skip the non-existing keys in the lookup table
I am new to Graylog pipeline rules. I want to write a pipeline to skip the non-existing keys in the look up table from indexing.
we have 20 Ip addresses as Key and 4 regions as values. we are receiving more than 100 IP addresses from source. I want…

Kick
- 31
- 8
0
votes
1 answer
Output graylog logs to another graylog
I'm trying to output all the logs from a Graylog server to another one.
I would like to make this from multiple servers to the same one (categorizing them to keep a track on which log come from which server)
Does somebody have an idea on how I could…

Simon Rouvel
- 23
- 1
- 5
0
votes
0 answers
Additional information: Couldn't read cluster state for indices graylog_*
I tried following commands to set graylog server up properly on local:
$ docker run --name mongo -d mongo:3
$ docker run --name elasticsearch \
-e "http.host=0.0.0.0" \
-e "ES_JAVA_OPTS=-Xms512m -Xmx512m" \
-d…

systemdebt
- 4,589
- 10
- 55
- 116