Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [graylog]

Graylog is a full-featured open source log management solution.

Graylog is a full-featured open source log management solution.

88 questions
0
votes
1 answer

Handle 150 req/s and 2TB of logs for 7 days of retention available by API

I would like to get advise from experienced people to build a HA infrastructure to log 2To of data in JSON format every week. I need to have a retention time of 7 days and need to be able to requests these data by API. The global requirements are…
michbr010
  • 1
0
votes
1 answer

Graylog - data from newest indice not returned on search

I have a Graylog server (newest version) collecting data from nginx. It´s been running for a while. I retrieve the collected data by querying my Elasticsearch cluster (v7 newest version) which consists of 4 nodes ATM. This all work(s/ed) fine. Now I…
OpenHaus
  • 71
  • 2
  • 6
0
votes
1 answer

does remote logging stops local logging

I'm using a Graylog server to centralize logs from network equipment and servers and I'm wondering if the Syslog service on the switches, windows machines, and other equipment, that service still going to save logs locally or just send them remotely…
Retro_0
  • 5
  • 3
0
votes
0 answers

HA Proxy - Header as a Variable

Is there a way I can eliminate the need for hardcoded server name "graylog.example.org" from the haproxy.cfg ? https://docs.graylog.org/docs/web-interface frontend http bind 0.0.0.0:80 option forwardfor http-request add-header X-Forwarded-Host…
SethuIT
  • 1
0
votes
1 answer

Graylog Email Alert Password Not Working?

I recently changed my gmail password and changed the password in server.conf as well, but now graylog's email alerting fails with: Sending the email to the following server failed : smtp.gmail.com:587 (javax.mail.AuthenticationFailedException:…
ehammer
  • 75
  • 1
  • 10
0
votes
1 answer

graylog 4.0 - Injector could not be created

Trying to set up graylog with official graylog2.graylog ansible role. Installed Elasticsearch (v7.10.2) cluster on three separate servers with official elasticsearch ansible role (node_1 - master, node_2 and node_3 - data) - no problems so far. When…
Drew
  • 101
  • 2
0
votes
0 answers

TripleO: How to configure containerized rsyslog to use graylog instead of elasticsearch

Overview Let me first give a short overview of what we want to accomplish. I am currently helping to deploy a TripleO Openstack Cloud, and we would like to use a different way of storing the logs provided by the rsyslog service that is created from…
Alex
  • 1
  • 1
0
votes
1 answer

Graylog fails to parse nginx access_log: JsonParseException: Unexpected character ('<' (code 60))

I've followed https://github.com/ronlut/graylog-content-pack-nginx-docker and Send NGINX logs to Graylog to try to get nginx logs into a graylog 4.1.5 server. Graylog is not displaying messages because it's failing to JSON parse them.…
Felipe
  • 1
  • 1
0
votes
1 answer

Graylog does not receive logs from Docker Swarm Services

I'm new with Graylog and I'm trying to use Graylog on a Docker Container, but the logs from the others containers does not arrive on Graylog and nothing is displayed on the Graylog web interface SEARCH. What should I do to logs of the containers…
Allan Andrade
  • 101
  • 4
-1
votes
1 answer

graylog does not work out of the box

http://docs.graylog.org/en/3.0/pages/installation/docker.html $ docker run --name mongo -d mongo:3 $ docker run --name elasticsearch \ -e "http.host=0.0.0.0" \ -e "ES_JAVA_OPTS=-Xms512m -Xmx512m" \ -d…
ses
  • 99
  • 4
-1
votes
1 answer

Graylog CSV Export is slow after upgrade

After I upgraded from graylog version 2.2.1 to 2.4.3, the csv export became quite slow compared to the previous download rate. I have to say that I did many changes putting it behind pfsense using readonlyrest to restrict access and change to…
AHT
  • 166
  • 1
  • 7
-1
votes
1 answer

How to bind use port 514 so graylog can use as input source

How can I bind 514 so it can be used by graylog. There are examples like iptables -t nat -A PREROUTING -i eth0 -p udp -m udp --dport 514 -j REDIRECT --to-ports 5514 But what I want is to use 514 using root.
jmazaredo
  • 202
  • 5
  • 13
-1
votes
1 answer

How to install graylog application on GCP Kubernetes Cluster

I am trying to install CAdvisor Graylog on Kubernetes Cluster. For now I just need to install simple application. But when installing graylog using Its documentation. I am getting this error "sub process usr bin dpkg returned an error code 1"
Aakriti Talwar
  • 1
1 2 3 4 5
6