Graylog2 is an open source syslog-compatible log aggregator with a webinterface to perform searches and analytics on the received log messages.

learn more… | top users | synonyms

0
votes
1answer
636 views

Installing Graylog2 with puppet

I have manged to install Graylog2 from scratch by downloading all the DEB files and making the configurations. Now I try to install Graylog2 with the help of puppet in an environment and had no luck ...
0
votes
1answer
80 views

execute command in ErrorLog and log to a file in parallel

I try to use apache2gelf to send my error.log information to a graylog2 server. To use that tool I have to change the ErrorLog setting to: ErrorLog "|| /path/to/errorlog2gelf.py --vhost example.com" ...
0
votes
1answer
433 views

Graylog2 cannot send email alert

I have graylog2 v0.20.6 and when I try send test alert via mail I see this error: Error! ×Unable to send dummy alert, check server log for details: API call failed GET ...
0
votes
0answers
95 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
1
vote
1answer
552 views

Graylog2 server cannot connect to Elasticsearch

I try to follow Digital Ocean manual except using last versions of components. My elasticsearch.yml: cluster.name: graylog2 network.bind_host: localhost network.publish_host: localhost ...
0
votes
0answers
137 views

ElasticSearchIllegalStateException: node is not configured to store local location

Hello I have some problem w with start graylog2-serwer. Graylog and Elasticsearch was installed with rpm packages form: ...
0
votes
0answers
526 views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
0
votes
1answer
1k views

Send echo message to graylog2 via GELF TCP 12201 port

I need to send a message to graylog2 server via echo to test if the %{@type} for facility is corrent, but once I do the echo thats in GELF support does not arrive in to my graylog2 server. If it ...
3
votes
1answer
477 views

Apache piping log to netcat fails

I want to send my Apache log in a custom format (GELF) to a UDP receiving server (running Graylog2). I was sure everything was working fine but then after a little while, I got an alert, my server was ...
0
votes
0answers
200 views

graylog elasticsearch install cannot change open file limit on reboot

I have a problem with our graylog 2 install. The elasticsearch process keeps on running out of file handles, this is in the //opt/elasticsearch/logs/graylog2.log log file. [2014-01-09 ...
0
votes
1answer
389 views

Syslog info from vmware hosts to graylog are not collecting correctly

I have a graylog syslog server running on debian, running fine. I wanted to send syslogs from our Vmware ESX hosts to Graylog. I point a ESX host to the syslog by doing the following: I open vSphere ...
7
votes
1answer
5k views

logstash (or graylog?) vs nxLog to collect event logs and csv logs

I am current investigating the possibility to consolidate logs from multiple servers using logstash (or graylog2). I am still a bit confused about the difference logstash and graylog. So far I ...
3
votes
1answer
223 views

How to migrate graylog2 to new server with all saved data and logs?

I need to change my graylog2 server to a new one with all data included. I've installed the new version, mongodb, elasticsearch and graylog2-web-interface. I also copied all elasticsearch_data to the ...
1
vote
1answer
1k views

How much of hardware resource is required for Graylog2? [closed]

We've mounted a graylog2 dedicated server (with a rails unicorn, mongodb and eleasticsearch) on a virtual machine with 2gigs of ram a couple days ago. RAM Consumption just keeps climbing, I am ...
2
votes
1answer
332 views

Large log management and storage

I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape. ...
2
votes
1answer
207 views

Disk / system configuration for log collection / syslog server

I am looking into building a syslog / logging infrastructure and am pondering about some architecture best practices. Essentially, I see that a syslog system needs to support two conflicting ...
1
vote
1answer
762 views

Fixing severity on graylog2 web interface

I am using logstash to collect logs from a group of webapps and send them to graylog2 for centralized viewing. I have the following filter for tokenizing: grok { type => "webapps" pattern ...
3
votes
5answers
973 views

thought on real time web analytics

we have a few web servers and am planning to create a dashboard to show the real time stats ip address,geo-location and other custom data based on database lookups. Splunk sort of fits perfectly but ...
5
votes
1answer
2k views

How to maintain the log source host using logstash

I am following the steps in this blog to set up rsyslog + logstash + graylog2 and I can't figure out how to replace the @source_host attribute in logstash using the mutate -> replace filter. In the ...
3
votes
2answers
604 views

Graylog2: Can a custom GELF field accept a JSON object

I was just reading the GELF spec as I'm integrating it into our system. I was just wondering if an additional/custom field can contain a JSON object as the spec doesn't mention it: So my GELF output ...
2
votes
4answers
3k views

Centralising Logfiles - Sending via TCP, versus SAN replication?

We have several (20+) application servers spread across multiple data-centres. We need to centralise the logfiles and monitor them from a single box. Requirements: Large logfiles, in the order of ...
3
votes
1answer
708 views

vSphere ESXi 5.0 hosts syslog to Graylog2 - Mangled log entries

I'm just setting up graylog2 (which is awesome) to be a syslog server for my virtualised environment. All my hosts and switches are happily logging away to graylog2, which is drawing some pretty ...
4
votes
4answers
9k views

Sending logs to Graylog2 server

I have just setup a Graylog2 server and I am looking to send all logs from my main server to the graylog server. I have enabled logging for the main server and am sending logs to my graylog server by ...
0
votes
3answers
2k views

Any body deployed GrayLog successfully?

We are looking for a open source logging system and found Graylog2 as one of the best one. Anybody having some experience in setting up? Any blog post you got while installing. I have few but still ...