[graylog2] Re: Collecting logs from OSX 10.11 El Capitan

2016-02-17 Thread Eric Green
Try adding *.* @mygraylog.server.com:514 And see what happens. That is, put the "@" in front of it, and :514 after it. This assuming you've set up a UDP syslog receiver on your graylog server. That said, I just tried that, and the only syslog messages I get at the other end are the ones I

[graylog2] Graylog-ctl scripts manual install

2016-02-17 Thread Bernie Carolan
I have looked through the documentation but cannot find a way of installing the graylog-ctl and associated scripts that are included with the virtual appliance releases. Is there some way of doing this rather than copying off the OVA when doing a manual install? -- You received this message

Re: [graylog2] Importing content pack fails

2016-02-17 Thread Eino Tuominen
Hi Edumundo, I tried with Chrome and Firefox. Now with Firefox I see these messages in the browser console as I try to import a content pack: Form contains enctype=multipart/form-data, but does not contain method=post. Submitting normally with method=GET and no enctype instead. contentpacks

[graylog2] Collecting logs from OSX 10.11 El Capitan

2016-02-17 Thread Dennis Seaton
Has anyone had success collecting logs from OSX? What about El Capitan (v10.11.3)? >From what I find on Google it USED to be as simple as adding a line to your syslog.conf file in OSX: **.* mygraylog.server.com* But that doesn't appear to work anymore, and if you look at the syslog.conf

Re: [graylog2] Importing content pack fails

2016-02-17 Thread Edmundo Alvarez
Thank you for the feedback, I have created a couple of issues in Github with the problems you reported. Feel free to add anything if you like: https://github.com/Graylog2/graylog2-server/issues/1831 https://github.com/Graylog2/graylog2-server/issues/1832 Regards, Edmundo > On 17 Feb 2016, at

[graylog2] Replace Timestamp

2016-02-17 Thread Juan Andres Ramirez
Hello Guys, Is posibble replace the Timestamp?. Graylog create a timestamp when the logs are send to Graylog, but I need replace the timestamp by date inside in logs. I'm using Nxlog and here is my input: Module im_file File 'E:\\Hadoop\\ParsedLogs\\*.*'

Re: [graylog2] Graylog2 durability

2016-02-17 Thread Rui Goncalves
l be lost if graylog terminates suddenly. On Wednesday, February 17, 2016 at 3:03:59 PM UTC, Joan Picanyol i Puig wrote: > > * Rui Goncalves <rgonc...@gmail.com > [20160217 13:22]: > > Does anyone know where can I find information about messages durability? > > >

Re: [graylog2] Importing content pack fails

2016-02-17 Thread thePretender
Thanks for your input, the problem was that extractor_type has changed to type, apparently. (sorry for hijacking the thread) On Wednesday, February 17, 2016 at 3:29:43 PM UTC+1, Edmundo Alvarez wrote: > > Hi thePretender, > > Thank you for testing the alphas! > > If you are referring to the

[graylog2] [Email alert]

2016-02-17 Thread kaiser
Hello, I have some questions about email alert. [Email alert conditions] --One can use regex in alert conditions. Is there a way to specify that the string matches is not case sensitive? For instance the condition : "*hello*" will match "HeLlO" string? --Will it be possible to add

Re: [graylog2] Graylog2 durability

2016-02-17 Thread Joan Picanyol i Puig
* Rui Goncalves <rgoncal...@gmail.com> [20160217 13:22]: > Does anyone know where can I find information about messages durability? > > > My question is, while sending messages via TCP input do I have any > guarantee that messages are persisted in graylog2 journal?

[graylog2] Re: rewrite incoming messages

2016-02-17 Thread 'Stefan Krüger' via Graylog Users
wow.. thanks that was easy.. i try something like regex ([\d]+.[\d]+.) and copy.. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [graylog2] Importing content pack fails

2016-02-17 Thread Edmundo Alvarez
Hi thePretender, Thank you for testing the alphas! If you are referring to the extractor's import/export pages, that is a different issue I'm afraid. Could you please use alpha 2 and try again? It would also be extremely helpful if you could try with your browser's Javascript console open,

Re: [graylog2] Importing content pack fails

2016-02-17 Thread Edmundo Alvarez
Hi Eino, Thank you for testing the alphas! Which browser are you using with Graylog? When you say "there are no errors", you mean appearing on the screen or also on the logs? Would you be so kind and try to do it once again, this time with your browser's JS console open? Please share any

[graylog2] Re: Importing content pack fails

2016-02-17 Thread thePretender
Somewhat same problem when importing extractors on alpha 1, getting import errors but there is no error message containing additional information anywhere. Exporting a simple extractor results in lots of additional fields containing metrics information as well(?). Seems like extractors/content

[graylog2] Re: rewrite incoming messages

2016-02-17 Thread thePretender
There is a built in function which does exactly that. Inputs -> Manage extractors -> click on desired IP field -> copy input -> choose same name and add Anonymize IPv4 addresses as a converter. The IP should now be i.e 192.168.1.xxx On Wednesday, February 17, 2016 at 1:44:42 PM UTC+1, Stefan

[graylog2] rewrite incoming messages

2016-02-17 Thread 'Stefan Krüger' via Graylog Users
Hello, I would like to send apache-logs to graylog ( at the moment i don't know whcih variant i would choose) is it possible to change the IP from the access.log? for example I would like to change the IP from 192.168.1.123 to 192.168.x.x Thanks for help! -- You received this message

[graylog2] Importing content pack fails

2016-02-17 Thread Eino Tuominen
Hello, I've tried to create and install a content pack. There are no errors just nothing happens after I try to import it. I'm running alpha 2 version. After trying with many content packs from the market place I tried to create a minimal one myself, but it behaves exactly the same way. The

[graylog2] extracting date field from json

2016-02-17 Thread Rui Goncalves
Hi. I'm sending JSON messages into a Raw TCP input. I would like to execute some extractors on the incoming message. 1) Apply JSON extractor on the incoming "message" field 2) Apply the "Copy input" extractor in the field "tstamp" extracted by previous JSON extractor, apply a date converter