Graylog2 is an open source syslog-compatible log aggregator with a webinterface to perform searches and analytics on the received log messages.

learn more… | top users | synonyms

0
votes
0answers
11 views

How to send rsyslog to graylog?

Hi I have just configured GrayLog Now I want to transport my Linux-Client log to GrayLog. How can I do that? I tried with allowing TCP:514 in /etc/rsyslog.conf and on the client I have added this ...
0
votes
1answer
4 views

Graylog2 log submit authentication

I'm testing Graylog2 as our central log management tool for our applications. Is there a way to secure the log submit process? If we only use graylog2 in our local environment its not a big deal to ...
0
votes
1answer
28 views

Graylog ignoring all HTTP logs

I've integrated our PHP web application using Monolog recently and added support for logging into Graylog. Until very recently I've used the Graylog VM and I've successfully logged all the information ...
1
vote
1answer
83 views

Asterisk logging to Graylog2

Does anyone have any experience with logging Asterisk servers to Graylog2? I'd like to be able to send certain verbosity levels to Graylog2, but I don't have a clue how to go about it. The goal is ...
1
vote
1answer
1k views

Installing Graylog2 with puppet

I have manged to install Graylog2 from scratch by downloading all the DEB files and making the configurations. Now I try to install Graylog2 with the help of puppet in an environment and had no luck ...
0
votes
1answer
89 views

execute command in ErrorLog and log to a file in parallel

I try to use apache2gelf to send my error.log information to a graylog2 server. To use that tool I have to change the ErrorLog setting to: ErrorLog "|| /path/to/errorlog2gelf.py --vhost example.com" ...
0
votes
1answer
1k views

Graylog2 cannot send email alert

I have graylog2 v0.20.6 and when I try send test alert via mail I see this error: Error! ×Unable to send dummy alert, check server log for details: API call failed GET ...
0
votes
0answers
276 views

Graylog2 date extractor from tab-delimited file

I have a tab-delimited logs with such messages: 2014-06-01 00:00:56 192.168.1.1 968 http://yandex.ru I can extract date and time with regexp (\d{4}-\d{2}-\d{2}\s*\d{2}:\d{2}:\d{2}) but when I ...
1
vote
1answer
1k views

Graylog2 server cannot connect to Elasticsearch

I try to follow Digital Ocean manual except using last versions of components. My elasticsearch.yml: cluster.name: graylog2 network.bind_host: localhost network.publish_host: localhost ...
0
votes
0answers
240 views

ElasticSearchIllegalStateException: node is not configured to store local location

Hello I have some problem w with start graylog2-serwer. Graylog and Elasticsearch was installed with rpm packages form: ...
0
votes
1answer
834 views

How to forward arbitrary files to graylog2 with rsyslog

I have some random files that I would like to collect and forward to my logging server. These are applications that don't really support GELF, so I am trying to forward these files with rsyslog: # ...
1
vote
1answer
3k views

Send echo message to graylog2 via GELF TCP 12201 port

I need to send a message to graylog2 server via echo to test if the %{@type} for facility is corrent, but once I do the echo thats in GELF support does not arrive in to my graylog2 server. If it ...
3
votes
1answer
914 views

Apache piping log to netcat fails

I want to send my Apache log in a custom format (GELF) to a UDP receiving server (running Graylog2). I was sure everything was working fine but then after a little while, I got an alert, my server was ...
0
votes
1answer
814 views

Syslog info from vmware hosts to graylog are not collecting correctly

I have a graylog syslog server running on debian, running fine. I wanted to send syslogs from our Vmware ESX hosts to Graylog. I point a ESX host to the syslog by doing the following: I open vSphere ...
9
votes
1answer
8k views

logstash (or graylog?) vs nxLog to collect event logs and csv logs [closed]

I am current investigating the possibility to consolidate logs from multiple servers using logstash (or graylog2). I am still a bit confused about the difference logstash and graylog. So far I ...
3
votes
1answer
374 views

How to migrate graylog2 to new server with all saved data and logs?

I need to change my graylog2 server to a new one with all data included. I've installed the new version, mongodb, elasticsearch and graylog2-web-interface. I also copied all elasticsearch_data to the ...
1
vote
1answer
2k views

How much of hardware resource is required for Graylog2? [closed]

We've mounted a graylog2 dedicated server (with a rails unicorn, mongodb and eleasticsearch) on a virtual machine with 2gigs of ram a couple days ago. RAM Consumption just keeps climbing, I am ...
3
votes
1answer
407 views

Large log management and storage

I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape. ...
2
votes
1answer
234 views

Disk / system configuration for log collection / syslog server

I am looking into building a syslog / logging infrastructure and am pondering about some architecture best practices. Essentially, I see that a syslog system needs to support two conflicting ...
1
vote
1answer
927 views

Fixing severity on graylog2 web interface

I am using logstash to collect logs from a group of webapps and send them to graylog2 for centralized viewing. I have the following filter for tokenizing: grok { type => "webapps" pattern ...
3
votes
5answers
1k views

thought on real time web analytics

we have a few web servers and am planning to create a dashboard to show the real time stats ip address,geo-location and other custom data based on database lookups. Splunk sort of fits perfectly but ...
5
votes
1answer
2k views

How to maintain the log source host using logstash

I am following the steps in this blog to set up rsyslog + logstash + graylog2 and I can't figure out how to replace the @source_host attribute in logstash using the mutate -> replace filter. In the ...
3
votes
2answers
878 views

Graylog2: Can a custom GELF field accept a JSON object

I was just reading the GELF spec as I'm integrating it into our system. I was just wondering if an additional/custom field can contain a JSON object as the spec doesn't mention it: So my GELF output ...
2
votes
4answers
3k views

Centralising Logfiles - Sending via TCP, versus SAN replication?

We have several (20+) application servers spread across multiple data-centres. We need to centralise the logfiles and monitor them from a single box. Requirements: Large logfiles, in the order of ...
3
votes
1answer
802 views

vSphere ESXi 5.0 hosts syslog to Graylog2 - Mangled log entries

I'm just setting up graylog2 (which is awesome) to be a syslog server for my virtualised environment. All my hosts and switches are happily logging away to graylog2, which is drawing some pretty ...
4
votes
4answers
12k views

Sending logs to Graylog2 server

I have just setup a Graylog2 server and I am looking to send all logs from my main server to the graylog server. I have enabled logging for the main server and am sending logs to my graylog server by ...
0
votes
3answers
2k views

Any body deployed GrayLog successfully?

We are looking for a open source logging system and found Graylog2 as one of the best one. Anybody having some experience in setting up? Any blog post you got while installing. I have few but still ...