Re: [graylog2] Bundeling/copying all executable jars after comiling graylog

2015-08-27 Thread Kay Röpke
Hi!

We use the assembly plugin to do this.

Run mvn assembly:single (or mvn package) to perform the same steps our build 
system does.
Please have a look at the travis.yml: 
https://github.com/Graylog2/graylog2-server/blob/master/.travis.yml 
https://github.com/Graylog2/graylog2-server/blob/master/.travis.yml 

Best,
Kay 
 On 27 Aug 2015, at 15:18, Anant Sawant sawantanan...@gmail.com wrote:
 
 Hi,
 
 I have successfully compiled the Graylog server component (it wasn't easy)by 
 running maven clean install on the parent module namely graylog2-parent in 
 eclipse using m2e.
 After compilation, in the m2e repository the multiple executable jars for 
 respective modules (10 modules) are created. I was expecting that I will get 
 only one executable jar(one complete Graylog jar). Do I have to bundel all 
 the jars to into one to get the single jar or am I missing something??.
 
 Also the packaging type of the parent is POM which cannot be changed to jar 
 as Project Aggregation is used . So how do I get the executable jar for 
 Graylog after compilation??.
 
 Do I have to bundle all the jars to into one to get the single jar or is 
 there any other way?.
 
 Thanks in Advance.
 Anant :-)
 
 -- 
 You received this message because you are subscribed to the Google Groups 
 Graylog Users group.
 To unsubscribe from this group and stop receiving emails from it, send an 
 email to graylog2+unsubscr...@googlegroups.com 
 mailto:graylog2+unsubscr...@googlegroups.com.
 To view this discussion on the web visit 
 https://groups.google.com/d/msgid/graylog2/ea1fdb4b-2eeb-4a70-9291-efb5b78617f6%40googlegroups.com
  
 https://groups.google.com/d/msgid/graylog2/ea1fdb4b-2eeb-4a70-9291-efb5b78617f6%40googlegroups.com?utm_medium=emailutm_source=footer.
 For more options, visit https://groups.google.com/d/optout 
 https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/ED28BEE6-070F-4769-B0BC-DB3D836FEFB9%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Bundeling/copying all executable jars after comiling graylog

2015-08-27 Thread Anant Sawant
Hi,

I have successfully compiled the Graylog server component (it wasn't 
easy)by running maven clean install on the parent module namely 
graylog2-parent in eclipse using m2e.
After compilation, in the m2e repository the multiple executable jars for 
respective modules (10 modules) are created. I was expecting that I will 
get only one executable jar(one complete Graylog jar). Do I have to bundel 
all the jars to into one to get the single jar or am I missing something??.

Also the packaging type of the parent is POM which cannot be changed to jar 
as Project Aggregation is used . So how do I get the executable jar for 
Graylog after compilation??.

Do I have to bundle all the jars to into one to get the single jar or is 
there any other way?.

Thanks in Advance.
Anant :-)

-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/ea1fdb4b-2eeb-4a70-9291-efb5b78617f6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: What's the difference between local and global input?

2015-08-27 Thread Sebastien Malinge
Hi Mehtap,

Local inputs run only on one node (where you configure the input).
You can have one server with an input for syslog and one server with an 
input for gelf for example.

Global inputs are launched on all server nodes.



On Wednesday, August 26, 2015 at 5:45:15 PM UTC+2, Mehtap Gundogdu wrote:

 Hello!

 Is there anyone know something about the difference between local and 
 global inputs?

 I can't find any documentation about the difference.

 /mehtap


-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/9fa3dd5f-71aa-40dd-8baa-e70e69503020%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Unable to see Collector component in Graylog Web UI in Ubuntu

2015-08-27 Thread Jochen Schalanda
Hi Preetika,

support for the Graylog Collector has been added in Graylog 1.1.x and you 
seem to be running Graylog 1.0.x. Please upgrade to a more recent version 
as described at 
http://docs.graylog.org/en/1.1/pages/installation/operating_system_packages.html#ubuntu-14-04
.

On Graylog 1.1.x, you can open the Graylog Collector page in the web 
interface under System/Collectors (http://localhost:9000/system/collectors).


Cheers,
Jochen

On Wednesday, 26 August 2015 17:45:15 UTC+2, preetika shukla wrote:

 Hi,

 I have followed the exact steps mentioned in 
 http://docs.graylog.org/en/1.0/pages/installation.html#operating-system-packages
  
 http://www.google.com/url?q=http%3A%2F%2Fdocs.graylog.org%2Fen%2F1.0%2Fpages%2Finstallation.html%23operating-system-packagessa=Dsntz=1usg=AFQjCNHfScyV6TseW70D3ioURmxLcbxjvg
  
 for ubuntu 14.0.4. I've got the mongodb,elastic search,graylog 
 server/web/collector up. Unfortunately when I hit the web ui 
 http://host:9000 and login through the admin, I am unable to see the 
 collector component all together. I'm attaching the screenshot of the 
 System tab. What am I missing? 


 Thanks,
 Preetika


-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/990bb1d3-6a5c-4961-89d1-88806bc0c25c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Anyone successfully using a load balancer to round robin each message sent to graylog?

2015-08-27 Thread Drew Miranda
It is possibly a configuration issue on our side, but we have a content 
switch load balancer setup to round robin between two graylog nodes. What 
i'm seeing is that the load balance is only distributing the number of 
endpoinds sending logs to each graylog node and not truly round robining 
the messages. this makes the graylog cluster unable to handle excessive 
load.

The load balancer also does not properly detect dead/alive nodes and 
continues to send message to offline graylog nodes (this is likely a load 
balancer configuration).

I'm curious what graylog recommends as far as making this work as intended.

On Wednesday, August 26, 2015 at 3:40:27 AM UTC-5, Jochen Schalanda wrote:

 Hi Drew,

 I know of several installations of Graylog which use load balancers in 
 front of a Graylog cluster. Are there any specific problems you've 
 encountered in regard to Graylog's part in this setup?

 Just one remark: Load balancing GELF messages sent via UDP (Graylog's GELF 
 UDP input) might cause some problems due to the chunking feature which 
 requires all chunks of a GELF message being sent to the same Graylog server 
 node. Also take a look at 
 http://docs.graylog.org/en/1.1/pages/load_balancers.html for some hints 
 how to configure a highly available Graylog setup.


 Cheers,
 Jochen

 On Wednesday, 26 August 2015 05:28:17 UTC+2, Drew Miranda wrote:

 I'm working with our network guys to setup a load balancer configuration. 
 It does work, but it does not alternate which graylog node it sends 
 messages too.

 An example of what I'd like to happen: each graylog node currently only 
 effectively process up to 1000 messages per second. Server A may send a 
 surge of 10,000 messages in one second and fill up a single graylog node 
 until the journal is fully processed. If messages are alternated via the 
 load balancer, multiple graylog nodes can share the load and process 
 messages more quickly.



-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/188b41c3-3898-4c48-886b-b7bfc473a7c1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Service graylog2-server shuts down after start of CentOS

2015-08-27 Thread Karl Schleifenbaum
Thanks, Jochen, for pointing that out.
I rewrote the install script in terms of new versions of elasticsearch, 
graylog-web and graylog-server.
The installation runs fine but now service --status-all says elasticsearch 
dead but subsys locked and also the same message for graylog-server and 
-web.
I have a clean CentOS6 minimal with no other packages installed than httpd.
I hope there is a simple solution to that problem.

-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/3fdb2bb4-71a0-4c43-bb62-a1cea3f29564%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Extractors: Add field with static content

2015-08-27 Thread Jan
Hello everyone,

I'm trying to add an extractor field, based on regular expressions I want 
to add different tags to the incoming messages.

I only found the normal way to extract a part of a regex-match for usage as 
value of the new field so far. Is there a possibility to set a static value 
as well?

Yours,
Jan

-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a9ff666a-822f-4123-8f2c-80133f3062d6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Graylog On Apache

2015-08-27 Thread Anant Sawant

Hi Drew,

Thanks for the response, it was really helpful.

Can you please tell me, how does *Graylog web interface* communicates with* 
Graylog server* component. I couldn't find any docs for the same. I need 
this to better understanding of these component.

Thanks in advance.

Anant :-)



On Wednesday, 26 August 2015 08:23:34 UTC+5:30, Drew Miranda wrote:

 Apache is a web server so you wouldn't install graylog on it. You can set 
 it up on a server that apache is running on, although I don't recommend it.

 What you may want is log collection. It is a piece of software to read the 
 apache logs in real time and forward to graylog. Check out the 
 documentation pages in the graylog collector section.


-- 
You received this message because you are subscribed to the Google Groups 
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/f590b425-1c4a-4b5d-a0b6-f7df97f6bf2e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.