Stack Overflow
Stack Overflow

Questions tagged [graylog2]

Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.

279 questions
2
votes
0 answers

How do I change the encoding of the logs before they reach Graylog?

I am using graylog2 to manage the logs of a proprietary application we use in my team. The problem is that that application is writing it’s logs on files using UCS-2 LE BOM encoding. We use the Graylog Collector Sidecar in order to parse our…
Loupax
  • 4,728
  • 6
  • 41
  • 68
2
votes
1 answer

Delete a specific log message from Graylog

I need to delete a specific log messages from Graylog, however there doesn't seem to be any public API to do this (going by the Graylog API browser). There is very little documentation about how one might do this. I've found a few random articles…
Ryan.Bartsch
  • 3,698
  • 1
  • 26
  • 52
2
votes
1 answer

Graylog content pack -> get fields

I have installed graylog to analyse the logs of my haproxy better. I've installed to content pack, and now I can see the haproxy logs flowing in. However, the log message is 1 string. I'm trying to substract the different fields which are defined in…
mitch2k
  • 526
  • 1
  • 7
  • 15
2
votes
1 answer

Docker GELF driver env option

Having an issue getting the --log-opt env=env1,env2 option to work with docker 1.12 swarm-mode and graylog. All of my logs are being sent fine and the tag is coming through. However I see nothing coming in at all from the env setting. I also…
tweeks200
  • 1,837
  • 5
  • 21
  • 33
2
votes
1 answer

Graylog ; How to limit extractors application to a subset of sources

Trying to use extractors within Graylog, I cannot find a way to limit the pattern matching to one source. Basically I do a split&Index search to extract a field but I want this extractors to be used only for a subset of my sources. Documentation…
Loïc
  • 23
  • 5
2
votes
2 answers

How to pass file name from Filebeat to Logstash?

How to pass each log file name from Filebeat to Logstash? I want to see in Graylog source file names to do deep analysis. I studied the documentation but have not found an explanation. Can you help me?
Chameleon
  • 9,722
  • 16
  • 65
  • 127
2
votes
1 answer

Redirect python print output to graylog2

What I'm trying to achieve is to redirect python print from one docker container to the other (without any modification inside python code), with graylog2 (I'm currently using older version, all in one). So my first docker instance contains graylog…
PotatoBox
  • 583
  • 2
  • 10
  • 33
2
votes
0 answers

Ingest data into Graylog from Microsoft SQL Server 2012 Express

I'm asking out a question to the community on a requirement I had. I have been using Graylog for my system monitoring which works great. Right now, I'm trying to see if I could use Graylog to ingest the data records which I stored in a Microsoft SQL…
Adrian Tan
  • 33
  • 8
2
votes
0 answers

Graylog2 'cluster' over VPN

We have 2 locations connected by VPN. Currently we have 2 independent graylog servers. We want to create some kind co cluster, so we can reach logs on both sides even if VPN is down. Is is something like this: We already tried to create…
pszafer
  • 370
  • 2
  • 15
2
votes
1 answer

Graylog logging in sails using winston-graylog2

In my sailsjs Application, I am logging to a file using winston. Logs are getting stored properly in file. I have added a graylog transport but i am unable to get any logs in graylog. Following is my code in config/log.js var logger = new…
Sapna Jindal
  • 412
  • 3
  • 11
2
votes
1 answer

Regex to find spaces between quotes in Graylog

Working on an input extractor issue with IIS logs using an "advanced" IIS login tool to collect more than the basic logs provide. It's adding double quotes and spaces to many of the fields and we are trying to us the extractor to correct this. This…
user3034801
  • 53
  • 4
2
votes
0 answers

Access Graylog Docker container on url subpath

I tried to access graylog on a subpath. For example like myapp.com/graylog. I'm using NGINX as a reverse proxy to pass a request to /graylog to my graylog instance. The graylog instance is setup using the official graylog docker image. My location…
Thomas Kremmel
  • 14,575
  • 26
  • 108
  • 177
2
votes
1 answer

OSGi/Karaf doesn't find GelfAppender

I try to use Apache Karaf with a Gelf Appender to connect to Log4J, but I just get ClassNotFoundException. I followed the instructions from Karaf Docs section "Using your own appenders": I added a folder system/org/graylog2/gelfj/1.1.12/ and copied…
marquies
  • 1,066
  • 1
  • 10
  • 17
2
votes
0 answers

Index and Analyze Xml Data in Graylog

Is it possible to import and index XML data with Graylog? I know that it's built over ES, which only indexes fields of JSON objects. Is there a way to do it out of the box or I need to manually convert XML to JSON?
Alex Michel
  • 416
  • 3
  • 13
2
votes
0 answers

Combining alert conditions in Graylog

I am wondering if it is possible to combine two alert conditions, for example MessageCount and FieldContent, to send an alarm callback when there is more than 5 messages in a minute that have specific field content. Is it even possible to make a…
schadenfreude
  • 33
  • 4
1 2 3
…
18 19