[graylog2] SSL support for Graylog2 API

2014-12-04 Thread Aymeric Alibert
I would like to active SSL for the Graylog2 API (new feature on 0.92). I am running Ubuntu 14.4. The release note provides basic information on how to achieve it. But it does not detail what private key formats are supported (PEM, DER, PKCS8...). What type of encryption: RSA? Although, on which

[graylog2] graylog2 0.92 on CentOS 7 - 60Gig output-cache.p

2014-12-04 Thread Chris Tresco
I have graylog2 taking about 500 messages/sec on a syslog input. The elasticsearch cluster is on a separate set of servers from graylog2. I am wondering why this file gets so large and what I can do to keep the size down. It being that big, it seems to me it would be a problem with feeding

[graylog2] Re: GL 0.92 on RHEL7: [MasterCacheWorkerThread] Error while trying to work on MasterCache: java.lang.NullPointerException

2014-12-04 Thread Martin René Mortensen
One system contains 3 graylog2-server process on 3 different virtual servers, the other only 1 graylog2-server process on 1 virtual server. It seems something happened on the 3 node system, that makes all of them behave differently. I dont think debug output would give much, but I can give it

[graylog2] Re: SSL support for Graylog2 API

2014-12-04 Thread Jochen Schalanda
Hi Aymeric, the docs on that topic are a bit lacking at the moment, sorry. On Wednesday, 3 December 2014 23:09:54 UTC+1, Aymeric Alibert wrote: But it does not detail what private key formats are supported (PEM, DER, PKCS8...). What type of encryption: RSA? At the moment Graylog2 only

[graylog2] Re: GELF Output option v0.92.0

2014-12-04 Thread Jochen Schalanda
Hi Marty, On Thursday, 4 December 2014 07:19:02 UTC+1, Marty wrote: When using the UI for GL2 v0.91.3, no messages are shown. Searching messages from the GELF TCP Input, show nothings. Any ideas why this would be ? Did this setup work before, i. e. forwarding messages using a GELF output

[graylog2] Re: graylog2 0.92 on CentOS 7 - 60Gig output-cache.p

2014-12-04 Thread Jochen Schalanda
Hi Chris, On Wednesday, 3 December 2014 19:06:42 UTC+1, Chris Tresco wrote: I am wondering why this file gets so large and what I can do to keep the size down. It being that big, it seems to me it would be a problem with feeding messages to elasticsearch for indexing but I am not sure how

[graylog2] Re: Graylog2 v.20.1 RC1 Feedback

2014-12-04 Thread 'Mathieu Boscher' via graylog2
Hello We are currently evaluating Graylog2 (v0.91.3), and we are facing the same need as Jonathan regarding how to configure Graylog to use the source ip address of the syslog server sending it data as the source. Basically, in a heterogeneous network, the FQDN might be fancy on some equipment,