Do i need to install logstash also? On Fri, Mar 11, 2016 at 5:43 AM, Sivasamy Kaliappan <sivasa...@gmail.com> wrote:
> Hi, > > Can you publish the output of following command: > > Please run filebeat tool with following switches and paste the output. > > ./filebeat -v -e -c <config file> > > > Make sure you disable elasticsearch output in filebeat config file and > enable only logstash > > Regards, > Siva. > > On Thursday, March 10, 2016 at 5:15:01 AM UTC+5:30, Warriors wrote: >> >> Thanks Jochen. I have configured beats plugin and then created new beats >> input from Graylog UI. Do we need to install logstash or elasticsearch >> separately for output? I started filebeat by running below command, getting >> connection error if i look into stdout file (gave external ip of graylog >> server and default port 5044 in logstash output section, and we have opened >> the port 5044 also). Am i missing anything here? >> >> ./filebeat -e -c filebeat.yml -d publish >& stdout >> >> Error - >> >> "count": 1, >> "fields": null, >> "input_type": "log", >> "message": "[2016-02-06T08:35:33.551+00:00] [dev1wlc__server_1] >> [NOTIFICATION] [] [oracle.wsm.policy.model.impl.PolicySet] [tid: >> [STANDBY].ExecuteThread: '1' for queue: 'weblogic.kernel.Default >> (self-tuning)'] [userId: \u003canonymous\u003e] [ecid: >> b49c11d0-5d9a-432c-a956-608ba4be3d03-00000005,0] [APP: wsm-pm] [[", >> "offset": 190854, >> "source": >> "/u01/data/domains/dev1wlc_domain/servers/dev1wlc__server_1/logs/dev1wlc__server_1-diagnostic.log", >> "type": "log" >> } >> 2016/03/09 23:42:11.894846 output.go:87: DBG output worker: publish 50 >> events >> 2016/03/09 23:42:13.391503 single.go:126: INFO Connecting error >> publishing events (retrying): Head http://54.181.142.178:5044: EOF >> 2016/03/09 23:42:13.391587 single.go:152: INFO send fail >> 2016/03/09 23:42:13.391606 single.go:159: INFO backoff retry: 1s >> 2016/03/09 23:42:15.834765 single.go:126: INFO Connecting error >> publishing events (retrying): Head http://54.181.142.178:5044: EOF >> 2016/03/09 23:42:15.834798 single.go:152: INFO send fail >> 2016/03/09 23:42:15.834810 single.go:159: INFO backoff retry: 2s >> 2016/03/09 23:42:19.292124 single.go:126: INFO Connecting error >> publishing events (retrying): Head http://54.181.142.178:5044: EOF >> 2016/03/09 23:42:19.292156 single.go:152: INFO send fail >> 2016/03/09 23:42:19.292168 single.go:159: INFO backoff retry: 4s >> 2016/03/09 23:42:24.753438 single.go:126: INFO Connecting error >> publishing events (retrying): Head http://54.181.142.178:5044: EOF >> 2016/03/09 23:42:24.753492 single.go:152: INFO send fail >> >> >> >> On Wednesday, March 9, 2016 at 2:00:36 AM UTC-8, Jochen Schalanda wrote: >>> >>> Hi, >>> >>> there's a third-party plugin for support the Beats protocol in Graylog: >>> https://marketplace.graylog.org/addons?tag=filebeat >>> >>> Cheers, >>> Jochen >>> >>> On Tuesday, 8 March 2016 19:02:09 UTC+1, Warriors wrote: >>>> >>>> Thanks Jochen, I have installed filebeat on my linux server from where >>>> i want to read log files. How do i send logs to graylog which is hosted on >>>> AWS. My AWS Graylog URL is - >>>> http://ec2-54-153-172-32.us-west-1.compute.amazonaws.com/ >>>> >>>> On Wednesday, March 2, 2016 at 3:34:56 AM UTC-8, Jochen Schalanda wrote: >>>>> >>>>> Hi, >>>>> >>>>> there are several other log shippers, like nxlog >>>>> <https://nxlog.co/docs/nxlog-ce/nxlog-reference-manual.html>, logstash >>>>> <https://www.elastic.co/products/logstash>, or filebeat >>>>> <https://www.elastic.co/products/beats/filebeat>, which can be used >>>>> to read files on a system and send them to Graylog. >>>>> >>>>> Additionally, you might be able to tweak the internal logging >>>>> framework of WebLogic to send the messages directly to Graylog using one >>>>> of >>>>> the existing Log4j GELF appenders: >>>>> https://docs.oracle.com/cd/E28280_01/web.1111/e13739/config_logs.htm#WLLOG138 >>>>> , https://marketplace.graylog.org/addons?tag=log4j >>>>> >>>>> >>>>> Cheers, >>>>> Jochen >>>>> >>>>> On Wednesday, 2 March 2016 00:51:24 UTC+1, Warriors wrote: >>>>>> >>>>>> Can we collect the weblogic logs and fwd to graylog server with pout >>>>>> installing Graylog collector on the client machine? >>>>>> >>>>> -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/graylog2/SAnoyz-YtCw/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > graylog2+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/f53537b3-8075-4144-8bba-7b39491336f6%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/f53537b3-8075-4144-8bba-7b39491336f6%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- DISCLAIMER: This message, including any attachments, contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, please contact the sender immediately by reply e-mail and destroy all copies. You are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAJ2qA-oF0pc9uT8jCr8ep2vFg%2Bd2c9pXRY3GOkVFqt9ronT_kA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
