Questions tagged [graylog2]

Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.

279 questions
1
vote
1 answer

Delete Logs from Graylog/Elasticsearch

I'm trying to delete certain logs from graylog/elasticsearch using a curl query string command with no luck. I know I need to use -XDELETE to remove the log I just what to read it first. curl -GET 'http://localhost:9200/graylog_26/message/_query' -d…
SnapQoins
  • 21
  • 1
  • 3
1
vote
0 answers

Graylog stopped logging exceptions

We are using graylog along with Gelf4Net and log4net for logging exceptions using GelfUdpAppender. After deployment, graylog stopped logging exceptions while exceptions are getting logged in a file. After recycling app pool, graylog start logging…
ssharma
  • 521
  • 1
  • 7
  • 17
1
vote
1 answer

IPVS (keepalived) doesn't balance UDP connections

I have two load balancer with Debian 8 and three Graylog server with Debian 9. Every server in my network sends logs via rsyslog to a virtual server configured on the LB. The connection is UDP. The problem is that the packets are not balanced. (all…
mirobertod
  • 360
  • 2
  • 12
1
vote
1 answer

Graylog 2 Collector-Sidecar Configuration doesn't merge Multiline Messages correctly

I'm using Graylog 2 with the Collector Sidecar to collect logfiles from several remote machines. Those logfiles contain Java Stacktraces and Graylog lists every line of these as a seperate message. I tried using the "Enable Multiline" option in the…
Goppi
  • 11
  • 2
1
vote
2 answers

Direct logback logs to graylog

I have a third party java application which uses logback for logging. I want to add a Socket Appender to the application's logback.xml as specified in the documentation (https://logback.qos.ch/manual/appenders.html)
VenVig
  • 645
  • 1
  • 10
  • 14
1
vote
1 answer

Transfer symfony logfiles with filebeat to graylog in local docker-environment

Description I am trying to build an equal configuration in my local docker-environment like on our production system. After spending some time investigating and rebuilding the docker container setup, still can't get it to work and Graylog is not…
Chris P. Bacon
  • 533
  • 2
  • 15
1
vote
1 answer

How to limit the log size assigned to each device/host in graylog?

I use graylog for log management. logs send from multiple host to graylog, I want: 1- limit storage that allocate to per host 2- limit number of logs received from any host e.g: 1- if total size is 250GB, max size of host1 log is 100 GB, host2…
1
vote
2 answers

Graylog GelfLogger change source attribute

Currently I am getting messages from multiple sources into a single input. This all works fine and I can filter on specific sources. However the source names aren't really userfriendly, for example 4f5b4a8de2b9. So the question is, is it possible to…
munHunger
  • 2,572
  • 5
  • 34
  • 63
1
vote
0 answers

Is it possible to combine graylog messages?

Is it possible to create a message using values from two other messages in Graylog using only graylog's default functionality (such as pipelines and streams)? For example, if two messages arrive in graylog 30 seconds apart: { message:"view…
Kanembel
  • 434
  • 4
  • 11
1
vote
1 answer

graylog filters is not setup for django after configuration

I've set up a logging configuration as the dict below: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'formatters': { 'simple': { 'format': '%(levelname)s %(message)s' } …
RandomEli
  • 1,527
  • 5
  • 30
  • 53
1
vote
1 answer

Graylog Problems with create alert notifications

I create alerts with this topic But I dont understand why some information dont send. Like this variable ${message.fields.name} and another similar. This is my Conditions I used this template Date: ${check_result.triggeredAt} Stream ID:…
Dmytro
  • 61
  • 2
  • 13
1
vote
2 answers

Graylog / Symfony2 / Gelf: How to configure logger to ignore errors?

I'm trying to stream logs from a symfony 2 app to a graylog 2 server using the gelf format. My monolog configuration looks as follows: monolog: handlers: # --- 8< --- # ... # --- >8 --- graylog: …
Paul
  • 7,836
  • 2
  • 41
  • 48
1
vote
0 answers

How to run graylog code base

I want to download and run graylog code base and make some changes in it As of now i have fallowed below steps Step 1 : Download graylog-project binay from this link https://github.com/Graylog2/graylog-project-cli/releases Step2: Make .linux file…
Manju Kb
  • 51
  • 1
  • 8
1
vote
0 answers

Show logs stored in ElasticSearch On Grafana

I use ElasticSeearch and GrayLog to show and analyse logs, this solution is great, but I want to replace grayLog by Grafana, I see that it can do a lot of greate Graphes, but I dont found any solution to show logs on Grafana. I wont to collect…
1
vote
0 answers

Docker - logging to Graylog2 container with GELF log-driver raises an error

I want to set up Docker system to run MongoDB, Elasticsearch, Graylog2 and my microservices and also forward all the logs to the Graylog server. I've made a docker-compose.yml file to run it altogether: version: '2' services: elasticsearch: …
serge1peshcoff
  • 4,342
  • 11
  • 45
  • 76