Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [graylog]

Graylog is a full-featured open source log management solution.

Graylog is a full-featured open source log management solution.

88 questions
22
votes
2 answers

Send echo message to graylog2 via GELF TCP 12201 port

I need to send a message to graylog2 server via echo to test if the %{@type} for facility is corrent, but once I do the echo thats in GELF support does not arrive in to my graylog2 server. If it restart graylog2 then the messages about it starting…
cr0c
  • 1,116
  • 3
  • 15
  • 32
12
votes
1 answer

logstash (or graylog?) vs nxLog to collect event logs and csv logs

I am current investigating the possibility to consolidate logs from multiple servers using logstash (or graylog2). I am still a bit confused about the difference logstash and graylog. So far I appreciated the ease of use of logstash, but I would be…
E. Jaep
  • 283
  • 1
  • 3
  • 12
11
votes
4 answers

Sending logs to Graylog2 server

I have just setup a Graylog2 server and I am looking to send all logs from my main server to the graylog server. I have enabled logging for the main server and am sending logs to my graylog server by adding *.* @logs.example.com:1337 to…
user44923
7
votes
1 answer

Send NGINX logs to Graylog

I'm trying to collect nginx error and access logs with graylog, I think everything is correctly configured, but Graylog receive nothing from NGINX (Graylog & NGINX are in docker containers and both are in the same network) I use nginx/1.13.5 &…
MickaelCa
  • 96
  • 1
  • 1
  • 3
5
votes
1 answer

Apache piping log to netcat fails

I want to send my Apache log in a custom format (GELF) to a UDP receiving server (running Graylog2). I was sure everything was working fine but then after a little while, I got an alert, my server was not responding. I see in the Apache error log a…
ETL
  • 6,443
  • 1
  • 26
  • 47
5
votes
1 answer

How to maintain the log source host using logstash

I am following the steps in this blog to set up rsyslog + logstash + graylog2 and I can't figure out how to replace the @source_host attribute in logstash using the mutate -> replace filter. In the exmaple the author replaces his @source_host with a…
Ray Rodriguez
  • 51
  • 1
  • 2
5
votes
2 answers

Graylog2: Can a custom GELF field accept a JSON object

I was just reading the GELF spec as I'm integrating it into our system. I was just wondering if an additional/custom field can contain a JSON object as the spec doesn't mention it: So my GELF output (in particular the _request field below) would…
Sean Bannister
  • 741
  • 8
  • 19
4
votes
1 answer

Large log management and storage

I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape. Now, because these logs can be requested by…
Martino Dino
  • 1,145
  • 1
  • 10
  • 17
4
votes
1 answer

vSphere ESXi 5.0 hosts syslog to Graylog2 - Mangled log entries

I'm just setting up graylog2 (which is awesome) to be a syslog server for my virtualised environment. All my hosts and switches are happily logging away to graylog2, which is drawing some pretty graphs. So far, so good. However, when it comes to…
growse
  • 7,830
  • 11
  • 72
  • 114
3
votes
0 answers

Log custom header X-API-KEY from nginx to Graylog

I have an nginx (1.12.1) server running on VPS#1 and I have Graylog running on VPS#2. All sys + nginx logs are sent to Graylog. To get nginx working I've had to install the nginx content pack from Graylog Marketplace. I had to add the following to…
narzero
  • 175
  • 7
3
votes
1 answer

restrict which server can send logs to graylog

I can send logs to graylog server by providing specific details in my rsyslog file on the node.Something like this *.* @logs.example.com:1337 My question is that if someone else also has this info regarding my graylog server,that person can also…
thinkingmonster
  • 171
  • 3
3
votes
2 answers

Different extractors for the same Graylog input?

I'm using Graylog's sidecar functionality with Filebeat to pickup a number of different log files off my server, including Syslog, Nginx and Java App. All of these flow into the same Graylog input for Beats (I tried to supply multiple inputs,…
Jon
  • 632
  • 5
  • 12
3
votes
1 answer

Graylog failing to send emails (SMTP)

i am trying to let greylog2 send me email alters but i am getting this error no matter what i try? i am trying to use smtp.gmail.com as email server. This is the error message i am getting The Graylog server encountered an error while trying to…
Daniel Guldberg Aaes
  • 401
  • 1
  • 7
  • 13
3
votes
2 answers

How to migrate graylog2 to new server with all saved data and logs?

I need to change my graylog2 server to a new one with all data included. I've installed the new version, mongodb, elasticsearch and graylog2-web-interface. I also copied all elasticsearch_data to the new server and checked all config…
user2295262
  • 39
  • 1
  • 3
3
votes
5 answers

thought on real time web analytics

we have a few web servers and am planning to create a dashboard to show the real time stats ip address,geo-location and other custom data based on database lookups. Splunk sort of fits perfectly but wondering if there are any open source alternative…
Linus
  • 131
  • 2
1
2 3 4 5 6