Questions tagged [graylog2]

Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.

279 questions
2
votes
1 answer

Asterisk logs in Graylog2

I'd like to centralize the logs for x number of Asterisk servers in Graylog2. I can't find ANY documentation on this, or any people having written about doing it before - which obviously seems odd to me. I have an idea about using SNMP for this, but…
Peter Schrøder
  • 494
  • 1
  • 4
  • 22
2
votes
1 answer

Remove duplicate remote syslog messages

For redundancy, every host in our distributed network sends its syslog messages to two dedicated rsyslog-nodes. These in turn send syslogs to a central graylog instance: / rsyslog \ host --> graylog \ rsyslog / Now every…
bro
  • 21
  • 1
  • 3
2
votes
1 answer

Graylog2 - Startup fail. Address already in use

I am trying to install graylog2. I have installed open-jdk7. I have also installed elasticsearch and mongodb using apt on ubuntu 14.04. I am new to both graylog and elasticsearch. I just want to try a trail installation and try these out. And I also…
Manoj
  • 412
  • 2
  • 6
  • 18
2
votes
1 answer

Best way to log to Graylog2 from PL/SQL

What is the preferred way to log to a Graylog2 Server from PL/SQL code? I couldn't find any PL/SQL Logging API/Package that supports Graylog2.
Cengiz
  • 5,375
  • 6
  • 52
  • 77
2
votes
1 answer

Graylog2 Docker unable to start

I just started using Docker and I was trying to install graylog2 on my micro EC2 instance using Docker. But somehow, when I did curl on port 9000, it gave me curl: (52) Empty reply from server Graylog2 Docker Image: sjoerdmulder/graylog2-docker This…
eugene
  • 638
  • 2
  • 9
  • 19
2
votes
1 answer

How can I configure Hadoop to send my MapReduce logs to graylog2

I'm working with Hadoop 1.2.1 to create a series of chained map reduce jobs which will be run regularly in our production environment. At the moment, we are using graylog2 to get centralized access to logs and I would like to have the logs from my…
Angelo Genovese
  • 3,398
  • 17
  • 23
2
votes
3 answers

Trying regex pattern on greylog search

Hej, I'm trying to query graylog for any message not containing something that would match the regex pattern: (\\w+-)*\\d+ For example: some-article-x-12397 But normal regex seems not to be working for graylog. The help page doesn't give me…
Chris
  • 1,092
  • 2
  • 19
  • 39
2
votes
1 answer

Forwarding log via syslog-ng

I'm trying to forward my logs using syslog-ng to my central syslog server. But it is not working. This is the lines I added in syslog-ng.conf source s_access { file("/var/log/httpd/access_log" follow_freq(10) flags(no-parse)); }; destination…
Randeep
  • 533
  • 3
  • 7
  • 18
2
votes
2 answers

Sharing elasticsearch between Logstash/graylog2 and my own application

Would it be safe to share an elasticsearch cluster (or single-node elasticsearch cluster) between Logstash or graylog2 and my own application? what configuration changes/additions should be made for accomodating that? what kind of name-spacing would…
matanster
  • 15,072
  • 19
  • 88
  • 167
2
votes
1 answer

Graylog server fails to read Gelf message over TCP :: GELFDispatcher - Could not handle GELF message :: Failed to decompress the GELF message payload

I am trying to write the following json over tcp to graylog server: {"facility":"GELF","file":"","full_message":"Test Message Tcp","host":"FShabesta-12097","level":3,"line":"","short_message":"Test Message…
kaptan
  • 3,060
  • 5
  • 34
  • 46
2
votes
1 answer

Email notification from Graylog2

My client has a Greylog2 server set up to aggregate our log files. We have several streams defined. I'd like daily email notifications to be sent out - at a minimum "System received x errors in the last 24 hours", ideally a list of top ten most…
laura
  • 2,951
  • 9
  • 44
  • 61
2
votes
1 answer

How can I include devise usernames on rails logs (using graylog2)

Is there a way to include the logged in user in rails logs? I am using devise and graylog2, the latter of which I assume is inconsequential to the answer.
William
  • 1,295
  • 1
  • 10
  • 19
2
votes
1 answer

Customize GrayLog2 GELF View

GrayLog2 streams show by default: Date, Host, Severity, Facility and so on. I'd like to remove the redundant fields (Host, Severity and Facility). Is it possible to customize this view? Thanks!
Nir
  • 3,963
  • 8
  • 37
  • 51
1
vote
1 answer

Unable to get log messages from GELF appender (graylog) - spring

Graylog web page is running as below: Following the documentation for spring boot: graylog-springboot However, nothing shows in the result. Could you Please advise me if you know what im doing wrong. I have created log4j.xml file as…
gippo
  • 39
  • 5
1
vote
2 answers

JSON Extractor stops messages from showing up in graylog input

I have an nginx access_log Input that receives logs in json format. I have been trying to get the JSON Extractors working but to no avail. Firstly, I was following this official Graylog tutorial: https://www.graylog.org/videos/json-extractor This is…