Stack Overflow
Stack Overflow

Questions tagged [graylog2]

Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.

279 questions
0
votes
1 answer

Issue while connecting Graylog server to Elastic Search

Hi my configurations are: elasticsearch.yml : cluster.name: graylog2 node.master: true node.data: true bootstrap.mlockall: true ES_HEAP_SIZE: 8192 (@ 16GB memory) network.bind_host: 127.0.0.1 script.disable_dynamic: true graylog2.conf : is_master =…
Rajeshwar Bose
  • 29
  • 7
0
votes
1 answer

Elasticsearch node out of space due to large index size

I have run out of space on the machine that is running my Graylog server. A lot of the space is taken up with files in the /var/lib/elasticsearch/graylog2/nodes/0/indices/graylog2_0/0/index folder. Is it safe to remove the files in this folder? Is…
Seán
  • 523
  • 2
  • 10
  • 17
0
votes
1 answer

Remove unassigned Graylog2 index/shards with Bash in a loop

There were some disk issues on a Graylog2 server I use for debug logs. There are unassigned shards now: curl -XGET http://host:9200/_cat/shards graylog_292 1 p STARTED 751733 648.4mb 127.0.1.1 Doctor Leery graylog_292 1 r UNASSIGNED …
wishi
  • 7,188
  • 17
  • 64
  • 103
0
votes
1 answer

graylog2 not showing any data

I'm new to Graylog2. I'm using it for analyze the stored logs from Elasticsearch. I have done the setup successfully using this link http://www.richardyau.com/?p=377 But, I parsed the logs to elasticsearch under the index name called "xg-*". Not…
KMG
  • 889
  • 2
  • 14
  • 36
0
votes
1 answer

how to upgrade standalone version of graylog

I want to upgrade my standalone graylog2 instance from 1.1.5 to 1.2.1. I unpacked the new version, copy the old graylog.conf file and data/ directory and after I start the new version I get some errors. For example if I go to the indices page the…
Ben Keil
  • 1,050
  • 1
  • 10
  • 30
0
votes
1 answer

Elasticsearch - Remove old source in GrayLog2

Firstly I have to say im newbie at curl so Im asking here I have some sources in GrayLog2: https://i.stack.imgur.com/xkelZ.jpg and want remove them all Used curl to delete "12:00:02:" source curl -XDELETE…
Curl User
  • 115
  • 1
  • 3
  • 12
0
votes
1 answer

Unable to see Collector component in Graylog Web UI in Ubuntu

I have followed the exact steps mentioned here for Ubuntu 14.0.4. I've got the mongodb,elastic search,graylog server/web/collector up. Unfortunately when I hit the web ui http://:9000 and login through the admin, I am unable to see the collector…
jeangrey
  • 33
  • 5
0
votes
1 answer

Exporting data from Graylog to compile stats

We are thinking of using Graylog to collect logs data that will be later used to compile stats and display them on graphs (in another application). I am aware that you can create widgets/custom dashboards on Graylog web interface but is it possible…
Hyder B.
  • 10,900
  • 5
  • 51
  • 60
0
votes
2 answers

Running Graylog collector as root - any other options?

It seems the only way to gather nginx, apache and system logs through the graylog collector is to run it as root. Best practice holds that running services as root is generally ill advised. Is there a way to collect said logs apart from running…
Werner
  • 791
  • 1
  • 6
  • 23
0
votes
1 answer

nxlog data (gelf) to graylog2 server

I'm using a graylog2 vm to get my firewall syslogs and it runs quite well. Now I'd like to get some windows logs using nxlog and that doesn't work at all. My guess is that my xml code in the conf file is wrong, but I've been wrong before.. Note :…
Antoine
  • 1
  • 1
  • 2
0
votes
1 answer

Logging from more applications in one Graylog index

I am running dozens of applications and want them to push their logs into one Graylog server. I have lot of Console applications and lot of WebSites. Website logs usually have data like BrowserAgent, URL, etc. Console applications have other kind…
Lukas K
  • 6,037
  • 4
  • 23
  • 31
0
votes
0 answers

Best way to manually periodically import log files into Graylog using logstash

I'm currently using logstash to import dozens of log files from different webapps into Graylog. It works great the files are tagged so I know from wich webapp they originate. I can't change the webapp thus I can't add a GELF appender to the log4j…
IppX
  • 305
  • 1
  • 13
0
votes
2 answers

Graylog2 ssh stream rules

I have gotten a task to setup a new stream that catches all failed ssh logins. I have never used graylog before and iam really bad at regex. I have figured out that you need to create a new stream, make so that all the failed ssh login messages gets…
jonatan nilsson
  • 1
  • 2
0
votes
1 answer

How to kill/stop a process that continuously refreshes its PID?

I recently installed Graylog2 onto my Ubuntu server for log monitoring. I soon after get an alert stating that my CPUs are reaching capacity. I then log into my server over SSH and run top. What I see confuses me and makes it difficult to kill the…
sparecycle
  • 2,038
  • 5
  • 31
  • 58
0
votes
1 answer

Graylog2 Quick Setup Wizard has inactive Connect to MongoDB button in Ubuntu/Firefox

Ubuntu 12.04, Firefox 31.0, graylog2-setup-0.91.3.tar.gz, Java 7 I've been working with the Quick Setup instructions but am having trouble connecting to the MongoDB as per…
roymeo
  • 109
  • 3
1 2 3
…
18 19