Hi! Am Donnerstag, 28. August 2014 03:19:02 UTC+2 schrieb Foobar Geez: > > Can you please clarify if the below scenario works as expected? > > Data Input -> logstash (for extraction into fields) -> Elasticsearch <- > GL2-server <- GL2-web-interface > > In other words, can I send data from logstash to Elasticsearch but still > leverage the authentication/authorization feature along with streams by > setting up GL2-server and GL2-web-interface? >
No. You would need to forward the messages from logstash into graylog2-server (e. g. with the GELF output <http://logstash.net/docs/1.4.2/outputs/gelf>). Many Graylog2 features (especially streams and filters) rely on the log messages being processed and written into Elasticsearch by graylog2-server. Logstash currently doesn't (and probably will never) support writing messages in the "Graylog2 format" into Elasticsearch. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
