Questions tagged [graylog2]
Graylog2 is an open source log management tool for aggregating, filtering, alerting on, and performing analytics on syslog messages.
277
questions
0
votes
0
answers
17
views
Issue in getting json result from graylog api "Search/Universal/Absolute"
I am getting empty result set if we are retrieving data using Accept header as application/json but it’s working fine with Accept header text/csv (All other parameters being same).
API is showing ...
0
votes
0
answers
20
views
Can we implement SSO plugins in graylog version 5?
I wanted to implement SSO plugins in graylog version 5.
Don't want to go with LDAP or AD.
When i insert plugins in graylog 5 server will not start . it shows an error
is their any way to insert ...
1
vote
1
answer
29
views
Unable to get log messages from GELF appender (graylog) - spring
Graylog web page is running as below:
Following the documentation for spring boot: graylog-springboot
However, nothing shows in the result. Could you Please advise me if you know what im doing wrong.
...
0
votes
1
answer
95
views
Graylog- How to check the flow of messages between different services in logs in Graylog?
Graylog newbie here. I was wondering how I could check the flow of messages between dependent services in logs in Graylog. I'll give a small instance to make my self clear.
Let's there 4 services A,B,...
1
vote
1
answer
257
views
JSON Extractor stops messages from showing up in graylog input
I have an nginx access_log Input that receives logs in json format. I have been trying to get the JSON Extractors working but to no avail.
Firstly, I was following this official Graylog tutorial: ...
0
votes
1
answer
173
views
How to save graylog logs to mongodb
I'm trying to output all the logs from a Graylog server stream to a mongodb server. There is a jdbc output plugin that stream to RDBMS using jdbc but how to save the logs to Mongodb. Graylog is saving ...
0
votes
2
answers
185
views
How/Where do we specify curl commands in graylog?
I recently got started with the graylog application(https://www.graylog.org) and I understand that we can get logs for a particular service/application using the GUI provided after we specify the ...
0
votes
0
answers
78
views
Graylog Log Data in Interface
Can we able to see full log data in the Interface of Graylog at a single time or not. Or we can see only some amount of the data. What is the maximum quantity of the log data we can see in the Graylog ...
0
votes
0
answers
127
views
How to create a host for my graylog ingress
I need to set a URL/host for the graylog of my company but I can't understand how to use the ingress the way it's provided.
I've used this chart https://github.com/KongZ/charts and configured like ...
0
votes
1
answer
312
views
Group Data Table messages using a field Graylog
I have a Data Table connected to a stream where I receive the connections to the services. A field in the entering messages has a URL with the format domain.com/service/client_id, and I visualized ...
1
vote
1
answer
879
views
How do I configure Graylog to send Notifications (not Alerts!) via mail?
There are many answers as to how to make email alerts, but I am not interested in those. Instead, I am interested in the kind of 'admin' notifications I get shown in the web interface - things like a ...
0
votes
1
answer
983
views
Query Message ID with the Graylog REST API
I am trying to query Log messages from Graylog via their REST API. The query I am currently using looks like the following:
header = {"X-Requested-By": "OS-AD", "Content-Type&...
0
votes
0
answers
391
views
Graylog connecting to existing elasticsearch shows 503
Graylog v4.0.7
ElasticSearch v7.7
MongoDb v4.4
We are setting up Graylog in our kubernetes cluster. Graylog can connect to MongoDB server from another cluster using LB. When we connect our Graylog to ...
0
votes
1
answer
562
views
Why this extracted Graylog field is not showing in my widget?
I am using a pipeline connected to a .csv document, to create a new field in my windows logs on Graylog.
As you can see from the screenshot, I can see the field in every log, but when I click on "...
0
votes
1
answer
108
views
How to change a numeric ID into a sentence in Graylog using pipelines?
I am trying to "beautify" the data I receive from some windows logs on Graylog. My idea is to change the windows log ID from a number to the actual definition for that ID. For example: I ...
1
vote
1
answer
348
views
Got error "We are experiencing problems connecting to the Graylog server running on http://127.0.0.1:9000/api/. " in Graylog?
I tried to install Graylog service and followed the instructions below in the tutorial. Here is the official documentation : https://docs.graylog.org/en/4.0/pages/installation/os/ubuntu.html
But after ...
1
vote
1
answer
809
views
Graylog (graypy) + Docker
I'm starting to study docker and I'm trying setup a docker app (python + flask + gunicorn) which sends logs to a graylog server. As the client, I'm using the graypy python lib.
When I use only flask+...
0
votes
1
answer
947
views
Graylog not showing logs or messages from client
Hell There,
I am new to graylog, we have configured client with below entry in configuration file
*.* @1*.**.88.**:514;RSYSLOG_SyslogProtocol23Format (we are using 514 port)
even we tried to to send ...
0
votes
2
answers
1k
views
How to search today only data in Graylog
I found that it's extremely hard to search "today-only" message in Graylog. Here is what I've tried so far:
Using keyword: today 00:00:00 +0800 to today 23:59:59 +0800
Using timestamp:[&...
0
votes
1
answer
978
views
Linux filebeat input collector for Graylog
I'm try to configure a Graylog collector [filebeat] for Liunx. The part that I'm having an issue with is the paths:
The path I want to collect logs from has many log files contained in it. I only want ...
0
votes
1
answer
519
views
Retrieving the name of the method from which HTTP call was made using an Interceptor
I am using the Spring ClientHttpRequestInterceptor to capture all outgoing HTTP calls from my applications in order to log the data. In addition to the data that I am already collecting in the ...
1
vote
0
answers
86
views
Docker Compose common YAML add service name variable
I would like to send all my service logs to Graylog, but don't want to repeat my logging config.
How can I send in my service name to this YAML merge block?
version: "3"
x-common: &...
5
votes
1
answer
3k
views
How to retrieve log from graylog over API
How can I search logs from a graylog server with PHP?
Assume the graylog servers is https://host.td/api/search/universal/absolute
1
vote
1
answer
2k
views
k8s: expose directly udp port (no http) using traefik
I've just deployed graylog on my kubernetes cluster.
I need to be able to expose udp port as ingress rule, under graylog.localhost/gelf. Currently, my services are:
$ kubectl get service -o wide -l ...
0
votes
2
answers
611
views
Where does graylog save dashboard / widget design?
I want to backup the design of my graylog dashboard and specific widgets. Where does graylog store them?
0
votes
1
answer
705
views
Graylog error on Web Interface in .js file
I have a problem and I believe it may be due to my installation with HTTPS, I came to this conclusion simply because when installing over HTTP this does not happen, ie the problem is certainly due to ...
0
votes
2
answers
2k
views
graylog's logs show ERROR information: ... cause io.netty.channel.unix.Errors$NativeIoException: syscall:read(..) failed: Connection reset by peer)
I use graylog to collect message, and i have a problem that graylog's logs show so many same ERROR messages like this :
2019-10-24 02:01:38,731 ERROR: org.graylog2.plugin.inputs.transports....
1
vote
0
answers
233
views
From Inside a .netcore application running in a docker container, logs are not reaching to GrayLog server
I have built an asp.net core based application. while running the application directly from VS, I am able to receive the logs in the graylog server. But after building the docker container logs are ...
0
votes
1
answer
1k
views
Running Graylog behind Traefik
I have been using Traefik as a reverse proxy for several containers managed through docker compose. It has been working well but I'm having some difficulty getting graylog running properly behind it.
...
-1
votes
3
answers
1k
views
Enable Rsyslog with TLS to Graylog2
My problem is that I cannot get logs from my remote app to log to a Graylog2 input using TLS. The remote app was logging just fine before I attempted to enable TLS with self-signed certs so I am ...
0
votes
1
answer
365
views
Unable to Log Python List Objects as Message in Graylog
I am trying to send Python List as Log Message to Graylog. The approach that i am using is "Sending GELF messages via HTTP using curl" mentioned in http://docs.graylog.org/en/2.4/pages/gelf.html
But ...
1
vote
1
answer
392
views
Extract text from wrk output
I'm running a load test with wrk2 as a job on Jenkins. I'd like to send the results of the load test to Graylog but I only want to store the Requests/Sec and average latency.
Here's what the output ...
0
votes
1
answer
490
views
graylog pipeline rules to skip the non-existing keys in the lookup table
I am new to Graylog pipeline rules. I want to write a pipeline to skip the non-existing keys in the look up table from indexing.
we have 20 Ip addresses as Key and 4 regions as values. we are ...
1
vote
1
answer
3k
views
Graylog 2.3.2 API tokens :No configuration available for access tokens
I am not sure how to configure graylog 2.3.2 to get an API token for my admin user?
1
vote
1
answer
921
views
Graylog sink for serilolg add http context data
I am trying to add logging to .net core web api using graylog sink.
The desired output is to have same as on the console using formmater like this one:
"[{Timestamp:HH:mm:ss} {Level:u3}] {EventId}...
0
votes
1
answer
762
views
Output graylog logs to another graylog
I'm trying to output all the logs from a Graylog server to another one.
I would like to make this from multiple servers to the same one (categorizing them to keep a track on which log come from which ...
0
votes
0
answers
2k
views
Additional information: Couldn't read cluster state for indices graylog_*
I tried following commands to set graylog server up properly on local:
$ docker run --name mongo -d mongo:3
$ docker run --name elasticsearch \
-e "http.host=0.0.0.0" \
-e "ES_JAVA_OPTS=-...
1
vote
1
answer
2k
views
No API token was configured - When starting graylog-sidecar
I got ELK working to search for logs using Kibana and I am attempting to have Graylog working as well. I found that logstash need to have added the logstash-output-gelf to convert the messages to GELF ...
0
votes
1
answer
1k
views
Reading XEL (SQL Server eXtended Event file) by log collectors such as filebeats or nxlog
I want to create a centralized log with graylog and log collectors such as filebeats or nxlogs.
I know Microsoft SQL Server extended events creates .XEL files. but they are binary files.
Is there any ...
1
vote
1
answer
2k
views
Search graylog for string with dash and numerals?
I am having an issue finding the proper query syntax to search for the following string in my graylog messages:
Example strings:
/path-one/12/status
/path-one/18/status
/path-one/103/status
/path-...
-1
votes
1
answer
412
views
Deploy Graylog on GKE
I'm having a hard time deploying Graylog on Google Kubernetes Engine, I'm using this configuration https://github.com/aliasmee/kubernetes-graylog-cluster with some minor modifications. My Graylog ...
1
vote
0
answers
366
views
Oracle UTL_TCP to Graylog GELF TCP error - GELF message is too short. Not even the type header would fit
I am facing an issue when trying to send data from Oracle via UTL_TCP to Graylog GELF TCP.
I try with a single event (record, JSON formatted, as per Graylog required). The issue consists in the fact ...
15
votes
1
answer
41k
views
Graylog search contains string
I need to search in my data, which is apache2 log, I need all requests which URL is like so:
http://*&ucode=jn04
It starts with http and ends with &ucode=jn04
I tried this query :
...
1
vote
1
answer
1k
views
log4j appender only sending my messages to stdout, but not remote GELF appender
I'm having a strange issue where log4j is correctly displaying all my log messages the console, but is only sending log messages to my graylog server that I am not writing (e.g. a library I'm using ...
0
votes
1
answer
4k
views
Spring boot Microservices logging with Graylog
I want to use Graylog/RabbitMQ for logging with my spring boot microservices. As per my understanding I have to send my logs to RabbitMQ and have to integrate it with Graylog. I want to know the ...
0
votes
1
answer
1k
views
Graylog docker image bound to internal IP instead of 0.0.0.0
Based on the instructions on Graylog docker, I have the following docker-compose.yml to run the Graylog stack:
version: '2'
volumes:
es_data:
mongo_data:
graylog_journal:
services:
# MongoDB: ...
0
votes
1
answer
329
views
Intercepting request for centralized logging in spring microservices
I am trying to integrate Graylog (with RabbitMQ) for centralized collection of logs across different services, this includes HTTP request,response and custom logs of Rest Apis.
Is it good practice to ...
0
votes
1
answer
885
views
Graylog: how to search for custom properties
I would like to know how can I search for log messages with a custom properties containing a field named “Main Status” and value “Starting Process”…
how can i do that?
3
votes
1
answer
1k
views
Grok pattern to match URIPATH with optional URIPARAM
I want to use Grok Pattern for filtering out this
172.20.20.88 - - [10/Nov/2018:23:49:31 +0700] "GET /id/profile.pl?user=285&device=Bg3tlX HTTP/1.1" 502 852 "-" "Go-http-client/2.0" "0.009"
I am ...
1
vote
0
answers
146
views
Using nlog with extensions from standalone class project, doesn't work (Coult not load extension assemby)
I am trying to create a standalone class library for logging (named "Logger") purposes across different projects.
I have created a solution with a class project, and in this class, I have installed ...