graylog2

How to make traefik work with graylog2?

由 社会主义新天地 提交于 2019-12-24 01:24:13
问题 I'm getting this error when entering to web interface url: Server currently unavailable We are experiencing problems connecting to the Graylog server running on http://127.0.0.1:9000/api. Please verify that the server is healthy and working correctly. You will be automatically redirected to the previous page once we can connect to the server. Do you need a hand? We can help you. More details docker-compose.yml: graylog: image: graylog2/server:2.3.0-1 environment: GRAYLOG_PASSWORD_SECRET: xxx

Setup a graylog2 server with elasticsearch in a vagrant machine

由 限于喜欢 提交于 2019-12-23 11:36:12
问题 I'm trying to Install graylog2 server on my local dev machine and encountering problems with elasticsearch setup. My elasticsearch is installed as a service on a vagrant machine running on my dev machine. so My elasticsearch isn't installed in 127.0.0.1 but in 192.168.50.4 (the ip of the vagrant machine) I have ports 9200 forwarded from the vagrant machine but graylog2 server seems to fail to find it and stops running with a : ERROR: Could not successfully connect to ElasticSearch. Check that

Graylog2- how to config logs retention to 1 week

由 試著忘記壹切 提交于 2019-12-22 05:22:06
问题 We are using some Graylog2 servers ( graylog-server version 1.3.4). Because we receive too much of log messages, it requires a lot of memory. I am trying to reduce the logs retention to 1 week, every log messages older than 1 week will be deleted. However, I cannot find out any value in configuration file to do that. I used "max_time_per_index = 7d" value but max_time_per_index seems just define the age of an index until it's rotated and a new index is being created, not of the messages in

Docker GELF driver env option

由 筅森魡賤 提交于 2019-12-11 00:47:03
问题 Having an issue getting the --log-opt env=env1,env2 option to work with docker 1.12 swarm-mode and graylog. All of my logs are being sent fine and the tag is coming through. However I see nothing coming in at all from the env setting. I also tried using --log-opt labels=dev but had the same issue. They are being shipped to graylog and I'm not seeing it anywhere within any of the log fields that come through. Any ideas on what I'm doing wrong here? docker service create --log-driver=gelf --log

Delete a specific log message from Graylog

由 血红的双手。 提交于 2019-12-10 11:37:42
问题 I need to delete a specific log messages from Graylog, however there doesn't seem to be any public API to do this (going by the Graylog API browser). There is very little documentation about how one might do this. I've found a few random articles that imply it is/was possible via curl and a query API, but nothing substantive. Given a graylog is accessible via "http://1.2.3.4:5678" and I've got a message with an ID of "94c84300-d3c1-11e6-b900-005056ac343f" in index "graylog_0" how would I

How can I find messages in Graylog based on level (syslog severity/priority)

由 家住魔仙堡 提交于 2019-12-07 05:09:46
问题 I'm storing data from Drupal into syslog into Graylog. I'd like to find all messages based on their severity (what Graylog seems to call level). Here's a screenshot of some messages showing the "Level" field. These all happen to be Notices, but the search I entered is finding the word "Notice" in the message field, not in the Level field. 回答1: Since the Drupal logs are going through syslog (and Drupal's watchdog severity matches RFC 5424 severity levels) the levels you're looking for are

How to get GELFJ appender work in log4j?

由 扶醉桌前 提交于 2019-12-07 03:10:19
问题 I need to get my Java application writing logging to a Graylog2 server. The application uses a log4j configuration. Several things I have tried to get the logging writing to the Graylog2 server, the things I got working was sending a test message directly to the server, as shown here (first example). Yet, when I write an appender and attach it to the root logger, I always get this error message the first time a log event is to be fired: log4j:ERROR Could not send GELF message Nothing then

Searching for Gray Log 2 API or a way to query ElasticSearch

由 老子叫甜甜 提交于 2019-12-06 22:13:37
问题 I have a question regarding Gray Log 2 In the company I work for all systems report exceptions to Gray Log server which has predefined streams. I need to build an external Dashboard which retrieves data from different streams. I haven't found any Gray Log 2 API to use for this. I read that there is a possibility to query Elastic Search directly. Can you please advise how do I do so or if there is any Gray Log 2 API. My Dashboard will be written or in JSF or in .NET still not sure about which

Delete a specific log message from Graylog

由 ＊爱你＆永不变心＊ 提交于 2019-12-06 15:44:52
I need to delete a specific log messages from Graylog, however there doesn't seem to be any public API to do this (going by the Graylog API browser). There is very little documentation about how one might do this. I've found a few random articles that imply it is/was possible via curl and a query API, but nothing substantive. Given a graylog is accessible via " http://1.2.3.4:5678 " and I've got a message with an ID of "94c84300-d3c1-11e6-b900-005056ac343f" in index "graylog_0" how would I delete this message ? Since you have access to ES you can remove the message directly in ES. If your

How can I find messages in Graylog based on level (syslog severity/priority)

由 自古美人都是妖i 提交于 2019-12-05 08:36:49
I'm storing data from Drupal into syslog into Graylog. I'd like to find all messages based on their severity (what Graylog seems to call level). Here's a screenshot of some messages showing the "Level" field. These all happen to be Notices, but the search I entered is finding the word "Notice" in the message field, not in the Level field. Since the Drupal logs are going through syslog (and Drupal's watchdog severity matches RFC 5424 severity levels ) the levels you're looking for are stored in graylog by their numeric ID, e.g. 0-7. So, use search "level:5" to find messages with a severity
订阅 graylog2