[graylog2] Re: Check activity on a define time range only

[Aykisn]

Hi,

My regexes and conditions in my previous post are wrong.

The steam should have two rules :
1) source must match the server(s) name
2) the timestamp should match either between 22 to 00 or between 00 to 06.

If you're not familiar with regexes, I hardly suggest you learn to 
create/use them. If you're going to play with graylog or logs in general, 
it's gonna be hard to work without them.
Here you want to make a regex for the field timestamp (*seen when you 
unwrap a log on the search page*). Should look like this: 
2016-11-30T07:30:10.255Z
The following regex should work to catch all logs between 10 pm to 6 am 
(quickly tested and worked)
  *[0-9]{4}-[0-9]{2}-[0-9]{2}((T0[0-6]:.+)|(T2[2-3]:.+))  * 

I'll add an explanation later if you don't understand it, when I have time.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/594c4395-e156-402d-84df-c7c6a44e88e5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Check activity on a define time range only

[Aykisn]

Actually, there are several options avalable to you, depending on what you 
want exactly.

1) If you just want to se if those logs actually exists just do this : 

a) On the search page, just change the timeframe with the absolute 
settings, and enter the corresponding timeframe, here's an example, which 
will show you every logs between yesterday night and in the morning today :








b) Or you can just search on a one day timeframe, and look at the 
histogram, which will show you exactly what you want, while not needing to 
adapt the above settings every time. You can also put this graph in a 
dashboard for easy acces/view.




2) If you want to keep track of and see all the logs that are in the wrong 
timeframe (not between 6am and 22pm), you will have to create a stream with 
the following rules for example :

- source:yourwindowsserver  ("source matches exactly yourwindowsserver")
- timestamp must match regular expression : 
*[0-9]{4}-[0-9]{2}-[0-9]{2}T[00]|[22-23]:[0-9]{2}:[0-9]+*
- timestamp must match regular expression : 
*[0-9]{4}-[0-9]{2}-[0-9]{2}T[00]|[00-06]:[0-9]{2}:[0-9]+*
Not sure about the regexes, but you get the idea.
All logs coming from your windows server will belong to this stream, but 
only those who have a timestamp between 22pm to 23:59 pm, and between 0:00 
to 6am.


-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/48857389-3142-45bf-b4e9-78a6969f9f3d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Unable to get Geo-Location to work

[Aykisn]

It would seem that you did the steps correclty, since it is working on some 
ip fields.

Are you sure the ip addresses you are saying are not being geolocated are 
not private addresses ?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/bd272913-4b00-464e-9508-ffe50def0ed3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Check activity on a define time range only

[Aykisn]

Hi,

You should use streams, with one rule filtering all logs from the windows 
server only, and the second rule defining the timestamp range that the log 
should have, with regexes.
I will post an example tomorrow if you still need it.

Cheers.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/2212ce21-52cb-499e-87d7-2fe61ce38763%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Enabling geolocation

[Aykisn]

The GeoIP resolver automatically creates the ip_geolocation field on all 
the fields that are ip addresses. You don't need to do it manually.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/0a317029-b6fa-444c-a226-94a227ff0b6a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: geolocation

[Aykisn]

Did you do every steps of the documentation about this ?
Is there a pfsense_filter_sourceip_geolocation field in your list of fields 
?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/3552e67f-e665-4188-91bf-008f4be18736%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Creating an input as root

[Aykisn]

Hello,

I need to launch an UDP input on graylog on port 514 (*can't *use another 
one), and I found that I needed to be root to do that. However, I haven't 
found how to actually do that. Any insights ?

Thanks and regards.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/6f043288-6adc-4122-8c2e-9c72d804038e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Reset index number

[Aykisn]

Thanks, it is indeed only an aesthetic choice, still good to know.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/41c7f099-ed5c-4f17-a7bb-cbafab5ed003%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Bucketing statistics by cardinality of separate field

[Aykisn]

Not possible at the moment afaik. Have been looking for this feature in 
graylog for a while, with no success.

At the moment I'm using kibana alongside graylog to visualize such graphs. 
It doesn't take long to implement it since you only have to point your 
kibana to your elasticsearch nodes (all fields etc will be there, no need 
to redo anything).

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/bcfac4b8-8834-40e8-a89a-82c1e5174c7d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: geolocation problem

[Aykisn]

Hi,

That's not how it works.
You need to create an extrator that will catch the ip address in those 
messages, and make a field of it. Only then will the GeoIp resolver convert 
find the geolocation of that ip, and automatcally create a new field named 
"your_ip_field_geolocation", and you will be able to visualize a map out of 
this field.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/c9a0d071-3a10-4368-a3ba-00847325afab%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Using kopf plugin to change *_geolocation fields type to geo_point

[Aykisn]

Hello,

I did, and that didn't help with the problem I'm having here unfortunately.

I have managed to convert one field at a time by creating a nex template 
like this :
{
  "order": 0,
  "template": "graylog_*",
  "settings": {},
  "mappings": {
"message": {
  "properties": {
*"rp_ip_geolocation": *{
  "type": "geo_point"
}
  }
}
  },
  "aliases": {}
}

Problem is that it would be really unpractical to have to add a specific 
name in the template and cycle an index each time we would have a new 
geolocation field.

Have tried to do a template with a dynamic field too :

{
  "order": 0,
  "template": "graylog_*",
  "settings": {},
  "mappings": {
"message": {
  "dynamic_templates": [
{
  "geo": {
"mapping": {
  "type": "geo_point"
},
"match": "*_geolocation"
  }
}
  ]
}
  },
  "aliases": {}
}


Regards.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/b69cb95a-3da7-4902-bd24-049a114c9cf6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Using kopf plugin to change *_geolocation fields type to geo_point

[Aykisn]

I have managed to convert one field at a time by creating a nex template 
like this :
{
  "order": 0,
  "template": "graylog_*",
  "settings": {},
  "mappings": {
"message": {
  "properties": {
"*_geolocation": {
  "type": "geo_point"
}
  }
}
  },
  "aliases": {}
}

Problem is that it would be really unpractical to have to add a specific 
name in the template and cycle an index each time we would have a new 
geolocation field.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/7d601b5f-605c-4035-859c-9c380df91cf6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Sum values from squid field

[Aykisn]

Yeah it's working fine, thanks.
Do you happen to use the maps in kibana too by any chance ?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/452ceb6a-2146-4b4a-9a10-297ea217c8bc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: How to use the "copy input" extractor for the geolocation fields ?

[Aykisn]

I created a pipeline to rename the geolocation field. Working fine.
The problem now is that the field is not indexed. Is there any way it can 
be ?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/0540ef02-646a-442a-b27e-e5b1efeb3b47%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: How to use the "copy input" extractor for the geolocation fields ?

[Aykisn]

Hmm I guess I'm stucked then, because if I do that, the ip field won't 
exist for the GeoIp Resolver.

Thanks anyway :)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/5afc6e04-ef41-41e6-a8a3-0921292f5425%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] How to use the "copy input" extractor for the geolocation fields ?

[Aykisn]

Hello,

I want to duplicate the geolocation fields by using the copy input (to 
change the name of the fields) but it doesn't work unfortunately (no field 
is created).






Any insights on what is happening/what to do ?

Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a73ff72d-7e7e-4e5b-886e-9d5dc59367c2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: API not working since 2.1 upgrade

[Aykisn]

Oh that was it. I feel stupid now 6 -.-' 

Thanks a whole lot !

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/859f00ab-36c9-4680-9264-7f465cb74b7d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog 2.1 Search results error

[Aykisn]

Is your responsetime field converted to numeric ? If not, that's the 
problem.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/155deff8-9bec-4a4a-9251-152de9f2a66b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: API not working since 2.1 upgrade

[Aykisn]

Hi,

Here is the output of the curl :

HTTP/1.1 307 Temporary Redirect
Location: http://10.2.2.21:9000/
X-Graylog-Node-ID: 6aa2507f-a784-43d5-9732-6c987d284445
X-Runtime-Microseconds: 793
Date: Thu, 08 Sep 2016 10:37:59 GMT
Content-Length: 0

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/329c53f8-9568-4a4b-8d5f-8ba8dc9b15ee%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: API not working since 2.1 upgrade

[Aykisn]

>
> I can't access to the est API since the upgrade. I went to 
> http://hostname:9000/api, but got a 404 error (with the monkey picture).
>

Sorry, forgot to add that I then tried on http://hostname:12900/api but 
that didn't work either (no page is loaded).

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/38d6b7da-b48e-4a5f-a1b0-254760af6951%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Looking for a configuration example of filebeat + graylog collector use

[Aykisn]

I don't understand. In the documentaion, it says to put the address of the 
graylog server in this host field (in the output configuration). However, 
it then says that the type of the output is "logstash" Does that mean we 
have to use logstash as the forwarder with the collector ?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/e8072b73-2021-45c5-92e5-d53194c675ba%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Looking for a configuration example of filebeat + graylog collector use

[Aykisn]

Oh I just saw that the documentation for the collector was updated. Sorry 
for the inconvenience. 

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/0f5e63bc-c0f8-4624-9a68-05c9e81c38a5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Looking for a configuration example of filebeat + graylog collector use

[Aykisn]

Hello,

I want to use Filebeat to collect logs from files on windows clients, and 
forward these logs to graylog. However, I saw that in the output part of 
filebeat (in the yml file), the only options were elasticsearch, logstash, 
console or file. And in the collector, we can only chose the hosts for the 
output, without chosing the output type.

I'm kinda lost on what to fill on the collector, is it the graylog 
instances' ip ? Or the elasticsearch ones ?

Could someone please help and show a configuration example for this setup ?

Thanks.




-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/cc71d92a-ab53-4a40-9f86-371b4fc6df0c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Bigger production setup

[Aykisn]

I recommend this guide 
: 
http://severalnines.com/blog/high-availability-log-processing-graylog-mongodb-and-elasticsearch

You just have to adapt the guide to match the architecture you want.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/4b2dbb95-8493-4e28-b93d-3f68194163ab%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Question about Clustered setup

[Aykisn]

>
>
> The logs are being stored in the elasticsearch nodes. 
If I'm not mistaken, the kopf plugin is already installed in the OVA. It 
has a web interface that's kind of like a ressources monitor, showing you 
the CPU%/disk space being used on the nodes of the cluster. Try going to 
http://vm2:9200/_plugin/kopf/#!/nodes (where vm2 is the hostname of one of 
the elasticsearch nodes).
The interface is nice and shows you that the storage is indeed done by the 
ES nodes.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/c8899a9b-7cec-4818-a499-63f124f5fe80%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Extractor help

[Aykisn]

.+ (http://[^/]+)/ shoud work.

On Monday, August 15, 2016 at 10:46:47 PM UTC+4, Rafael Pereira Silva wrote:
>
> Hello, 
>
> Trying create a extractor an log bellow.
>
>
>
> need only extract the URL of this message:
>
>
> *1471285696.626  60020 10.110.103.9 TCP_MISS/200 593 POST 
> http://bioxxi.dasa.com.br/java-j2eedispatch/wa/sua/b927ea91c134227112782c98820a7145/1/72
>  
> 
>  - FIRST_UP_PARENT/bioxxiweb application/javascript*
> staying: 
> *http://bioxxi.dasa.com.br *
>
>
>
> someone could help me set up?
>
>
>
>
>
>
> I thank the attention.
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/42723e66-7944-4a55-8bc3-922b1b9cd333%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Creating a graph using two fields

[Aykisn]

That won't do anything related to the topic.

On Monday, August 1, 2016 at 5:37:09 PM UTC+4, Joan Picanyol i Puig wrote:
>
> _exists_:http_code ? 
>
> * Aykisn <houssde...@gmail.com > [20160801 09:52]: 
> > I think he meant *any* http codes. I'm also facing this problem. I have 
> > fields like *bytes *and *hosts* and I want to have a graph that shows 
> how 
> > much bytes the clients are using each (helps showing who is using the 
> most 
> > for example), but unfortunately isn't possible yet in gralog if I'm not 
> > mistaken. 
> > 
> > I think this is one of the most wanted feature, really hope this will 
> come 
> > out one day! 
> > 
> > Regards. 
> > 
> > On Friday, July 29, 2016 at 12:23:46 AM UTC+4, Alexandre Verri wrote: 
> > > 
> > > I have fields like *http_code *and *host*, and I would like to create 
> a 
> > > graph showing the total number of *http_code=404* per host, in a 
> certain 
> > > amount of time. 
> > > 
> > > How to create this graph in Graylog? 
> > > 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups "Graylog Users" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an email to graylog2+u...@googlegroups.com . 
> > To view this discussion on the web visit 
> https://groups.google.com/d/msgid/graylog2/ec5f2d36-65b8-4426-b34d-976731e5b370%40googlegroups.com.
>  
>
> > For more options, visit https://groups.google.com/d/optout. 
>
>
> -- 
> pica 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/00dd1d35-7311-4e62-a167-9dd29ce217a9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Creating a graph using two fields

[Aykisn]

I think he meant *any* http codes. I'm also facing this problem. I have 
fields like *bytes *and *hosts* and I want to have a graph that shows how 
much bytes the clients are using each (helps showing who is using the most 
for example), but unfortunately isn't possible yet in gralog if I'm not 
mistaken.

I think this is one of the most wanted feature, really hope this will come 
out one day!

Regards.

On Friday, July 29, 2016 at 12:23:46 AM UTC+4, Alexandre Verri wrote:
>
> I have fields like *http_code *and *host*, and I would like to create a 
> graph showing the total number of *http_code=404* per host, in a certain 
> amount of time.
>
> How to create this graph in Graylog?
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/ec5f2d36-65b8-4426-b34d-976731e5b370%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Changing map theme for geolocation

[Aykisn]

Thought as much ^^ Thank you, will do.

On Monday, July 25, 2016 at 12:28:15 PM UTC+4, Jochen Schalanda wrote:
>
> Hi Aykisn,
>
> that's currently not possible but feel free to open a feature request for 
> this at https://github.com/Graylog2/graylog-plugin-map-widget/issues.
>
> Cheers,
> Jochen
>
> On Monday, 25 July 2016 08:11:05 UTC+2, Aykisn wrote:
>>
>> Hello,
>>
>> I am using the free GeoLite2 database and I was wondering if there was 
>> any way to change the default map theme we have n the graylog user 
>> interface please ?
>>
>> Thanks.
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/6f1e61d5-378f-4c6f-a392-5a3865717a0e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Changing map theme for geolocation

[Aykisn]

Hello,

I am using the free GeoLite2 database and I was wondering if there was any 
way to change the default map theme we have n the graylog user interface 
please ?

Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/2b89f890-4a8e-43b0-984f-e0bd8e7cb940%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Change map themes for geolocation ?

[Aykisn]

Hello,

I am using the free GeoLite2 city geolocation database, and I was wondering 
if there w

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/38b59ff9-4c4c-4014-986f-16564bf31fc9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.