[graylog2] event correlation in graylog2

[smgold238]

My need is to correlate two events for following purposes
1. find the duration from event 1 to event 2 like user logged in at time 1 
and user logged out at time 2 - duration user was connected (t2-t1)
2. Secondly, event A has part of the information and part of the 
information is coming in event B - which the two together makes a full 
event.

So in a nutshell is there some event correlation facility available in 
graylog2 - log analysis. Or how should I go about doing this with graylog2 
0.90 version.

I was looking into Drools Fusion for event processing - but not getting 
anywhere with that!

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
graylog2 group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Deleted user and dashboards

[Edmundo Alvarez]

Hi Johan,

Thank you for reporting this issue!

I have created a Github issue to further investigate this problem, please feel 
free to add anything else you think might help:
https://github.com/Graylog2/graylog2-web-interface/issues/930

Regards,
Edmundo

--
Developer

Tel.: +49 (0)40 609 452 077
Mobile: +49 (0)171 27 22 181
Mobile (US): +1 (713) 321 8126
Fax.: +49 (0)40 609 452 078

TORCH GmbH
Steckelhörn 11
20457 Hamburg
Germany
https://www.torch.sh/

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

On 10 Oct 2014, at 15:26, sun...@sunner.com wrote:

 Hello,
 
 We've lost the ability to add widgets to dashboards, it took me a while to 
 figure out but this is because of a deleted user that once created a 
 dashboard.
 Basically, when you go to the dashboards list this will cause an error when 
 the Created by user isn't found, and this in turn seems to prevent adding 
 new widgets to any dashboard.
 For now we've solved this by adding a placeholder user by it'd be nice if 
 this wasn't needed.
 
 This happens with both 0.20.6 and 0.90.0.
 
 Regards
 Johan Sunnerstig
 
 -- 
 You received this message because you are subscribed to the Google Groups 
 graylog2 group.
 To unsubscribe from this group and stop receiving emails from it, send an 
 email to graylog2+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
graylog2 group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.