[graylog2] Extractors with Wildcards Cause High CPU/Load Average

2015-06-04 Thread Pete GS
Hi all, I've finally discovered the source of my excess CPU load and high load averages on my Graylog nodes! I've got a bunch of extractors that I use to pull information from my vSphere platform's VMKernel logs. The catch with these is that a lot of items in the message string vary quite a

[graylog2] Graylog 1.1 rpm update issue on 1 of 2

2015-06-04 Thread Mark Moorcroft
I yum updated both of my CentOS6 graylog servers to 1.1. The primary server where all the ES indexes reside seemed to have worked no problem. The second one that connects to the 1st seems to work perfectly in every way, BUT any attempt to Search results in the Oops message. I see no errors in

Re: [graylog2] Graphs in dashboard

2015-06-04 Thread Edmundo Alvarez
Hi, That is not possible at the moment, sorry. Regards, Edmundo On 04 Jun 2015, at 22:25, Denis Fateyev de...@fateyev.com wrote: Hello there, Is there a way to show charts on a dashboard exactly as they seen preliminary in search results? In other words, I have this graph in search

[graylog2] graylog OVA 1.1 upgrade

2015-06-04 Thread dana
I am currently running an OVA version 1.0 I want to upgrade to 1.1 but don't know if it is a drop-in upgrade. there is a warning to verify that it is before proceeding as it will wipe out all your data. I don't want to wipe any data and cannot confirm or deny that it is or is not a drop-in.

Re: [graylog2] Are GROK-conversions implemented?

2015-06-04 Thread Martin René Mortensen
Ok, thats a semi-colon... That works. This is awesome. On Thursday, 4 June 2015 16:29:40 UTC+2, Kay Roepke wrote: Hi! Version 1.1.0 ships with data type conversions in Grok patterns, yes. To verify I've just set one up, on a Raw TCP input. It splits input like: somekey:345345 into two

Re: [graylog2] graylog OVA 1.1 upgrade

2015-06-04 Thread Marius Sturm
We have currently one report that stream alerts got lost during the update and need to re-configured. So please backup your installation before, but the update is possible without bigger manual migration steps. On 4 June 2015 at 20:35, d...@wildcatracing.com wrote: I am currently running an OVA

Re: [graylog2] Graylog2 server High CPU, configuration questions

2015-06-04 Thread Matt Hines
Thanks Henrik, I will keep this in mind when deciding. Might switch the instance out to the CPU optimised one with 4 vCPUs and see how that copes, then scale horizontally out after that. Thanks all for the input. On Wednesday, 3 June 2015 20:38:25 UTC+1, Henrik Johansen wrote: Hello Matt,

[graylog2] [ANNOUNCE] Graylog v1.1 GA has been released

2015-06-04 Thread Lennart Koopmann
Hey everybody, a quick heads up that we just released Graylog v1.1 GA: https://www.graylog.org/graylog-1-1-is-now-generally-available/ Hope you like it! Cheers, Lennart -- You received this message because you are subscribed to the Google Groups graylog2 group. To unsubscribe from this group

[graylog2] Clean installation exception

2015-06-04 Thread Victor Gatica
Hi, I just install Graylog on a Centos 6.6 machine, through the RPM. When i tried to start the server i'm getting the follow exception 2015-06-03T13:59:38.555-04:00 WARN [PluginLoader] Plugin directory /etc/rc.d/init.d/plugin does not exist, not loading plugins. 2015-06-03T13:59:38.557-04:00

Re: [graylog2] graylog OVA 1.1 upgrade

2015-06-04 Thread dana
Thanks I will give it a shot next week! I will update the post with my findings. On Thursday, June 4, 2015 at 1:55:27 PM UTC-6, Marius Sturm wrote: We have currently one report that stream alerts got lost during the update and need to re-configured. So please backup your installation before,

[graylog2] Graphs in dashboard

2015-06-04 Thread Denis Fateyev
Hello there, Is there a way to show charts on a dashboard exactly as they seen preliminary in search results? In other words, I have this graph in search results: https://lh3.googleusercontent.com/--KiGiWvsEtg/VXCy5wjIPsI/GJo/jIsCGxcUMyc/s1600/glog01.png But the generated graph on the

[graylog2] Top list of common errors

2015-06-04 Thread チョコキャット日本語
I would like to have a dashboard widget which lists most common errors and how many they are. Is that possible? 3452 Really common error / exception 234 Some other error 12 Another Error 2 Error -- You received this message because you are subscribed to the Google Groups graylog2 group. To

Re: [graylog2] Are GROK-conversions implemented?

2015-06-04 Thread Martin René Mortensen
It is in the current 1.1 beta 3 ? From the version notes: *Server * - Enhanced Grok support with type conversions (integers, doubles and dates) I can't get it to work thou - I add :int to a http status for example, but the field just disappears. On Thursday, 19 March 2015