Re: [graylog2] 443 as non-root?

2014-08-26 Thread Jochen Schalanda
Hi Nicolas, as far as I know, jsvc requires support from the Java program itself to work (https://commons.apache.org/proper/commons-daemon/jsvc.html#Using_jsvc) but Graylog2 currently doesn't support that. Cheers, Jochen Am Dienstag, 26. August 2014 21:45:42 UTC+2 schrieb Nicolas Fédou: > > H

Re: [graylog2] 443 as non-root?

2014-08-26 Thread Nicolas Fédou
Hi, I have seen a library used for that : http://commons.apache.org/proper/commons-daemon/jsvc.html It provides an easy way to get ports under 1024. Nicolas. Le 26 août 2014 20:52, "Jochen Schalanda" a écrit : > Hi Mark, > > authbind also works on CentOS. You can either build it yourself or use

Re: [graylog2] 443 as non-root?

2014-08-26 Thread Jochen Schalanda
Hi Mark, authbind also works on CentOS. You can either build it yourself or use a RPM like https://github.com/tootedom/authbind-centos-rpm Cheers, Jochen Am Dienstag, 26. August 2014 20:40:31 UTC+2 schrieb Mark Moorcroft: > > All CentOS here. > > > On Tue, Aug 26, 2014 at 11:05 AM, Lennart Koo

Re: [graylog2] 443 as non-root?

2014-08-26 Thread Mark Moorcroft
All CentOS here. On Tue, Aug 26, 2014 at 11:05 AM, Lennart Koopmann wrote: > Another think to look at when on Ubuntu: > http://manpages.ubuntu.com/manpages/hardy/man1/authbind.1.html > > On Tue, Aug 26, 2014 at 8:02 PM, Mark Moorcroft wrote: > > > > I have read various strategies here to run t

[graylog2] Re: 443 as non-root?

2014-08-26 Thread Jochen Schalanda
Hi Mark, Am Dienstag, 26. August 2014 20:02:43 UTC+2 schrieb Mark Moorcroft: > > Apache and postfix both manage to run as non-root on low ports. > The way most UNIX daemons (like Apache httpd or Postfix) are doing this is by starting with root privileges (UID 0) which allows them to bind privil

Re: [graylog2] Re: Newbie to graylog2

2014-08-26 Thread Jochen Schalanda
Hi! Am Freitag, 22. August 2014 16:48:33 UTC+2 schrieb Foobar Geez: > > - I started reading about logstash and GL2 and it seems both have > overlapping functionality. Based on your experience, is there any reason > why I should be choosing one over the other? Given this is a GL2 forum, I > am

Re: [graylog2] 443 as non-root?

2014-08-26 Thread Lennart Koopmann
Another think to look at when on Ubuntu: http://manpages.ubuntu.com/manpages/hardy/man1/authbind.1.html On Tue, Aug 26, 2014 at 8:02 PM, Mark Moorcroft wrote: > > I have read various strategies here to run the web interface with 443 access > as non-root, such as iptables redirects etc. Apache and

[graylog2] 443 as non-root?

2014-08-26 Thread Mark Moorcroft
I have read various strategies here to run the web interface with 443 access as non-root, such as iptables redirects etc. Apache and postfix both manage to run as non-root on low ports. So I was wondering if it's on the radar to allow this with GL2? I realize apache and postfix manage this tri

Re: [graylog2] Re: Newbie to graylog2

2014-08-26 Thread Mark Moorcroft
I have wondered that myself. On Friday, August 22, 2014 7:48:33 AM UTC-7, Foobar Geez wrote: > > > A few questions: > > - What is the typical release cycle or how soon GL2 typically supports new > Elasticsearch versions? I see from GL2 release notes that it supports > v0.90 of Elasticsearch a

[graylog2] Re: graylog does not fire up with localhost as elasticsearch unicast

2014-08-26 Thread Arie
What happens if you change unicast_hosts to localhost:9300 In the original files the quotes are also absent. On Monday, August 25, 2014 4:09:42 PM UTC+2, Prof Hase wrote: > > I am trying to start graylog with a local instance of elasticsearch: > > elasticsearch_discovery_zen_ping_multicast_enable

[graylog2] Re: Memory Optimization Tuning For GrayLog server

2014-08-26 Thread Martin René Mortensen
Usually graylog2 server ends up eating all available memory if it cannot put the messages to the elasticsearch cluster fast enough. So your setup simply might not be performing. Check the /system/nodes page to see if the master cache is filling. Brgds. Martin On Thursday, 14 August 2014 11:57:

[graylog2] Re: Graylog2 fails with 10k messages per second

2014-08-26 Thread Martin René Mortensen
It fails because it cannot keep its message cache in memory. We have an ASA that produces around 5-6k msgs/s. I have 2 dedicated vms for elasticsearch and 1 for graylog2-server. 32G memory in each. I have had to tune memory alot because both elasticsearch and graylog2-server crash when they run