Re: [graylog2] graylog-collector on AIX stops sending logs suddenly with no errors?

2016-04-11 Thread Joi Owen
What size are the logs files? Do they stop running when they reach a certain size, or when the collector has transferred a certain amount of data? I'm wondering about bugs in the java from using INTs or something too small to handle the size of the files, 2G or 4G numbers come to mind. Do small

[graylog2] Log file monitoring

2016-04-11 Thread Ashish Barmase
Hi, I am trying to monitor the mongodb log file. /var/log/mongodb/mongod.log. I'm encountering an issue, is that after forwarding log to graylog, the same log lines again getting written into /var/log/messages. I'm using amazon linux and rsyslog version 5.8. Below is my

[graylog2] Re: Grok pattern convert to int

2016-04-11 Thread Alexey Chuenko
Anyone can explain what I am doing wrong? -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the

[graylog2] Re: JSON extractor joining array values?

2016-04-11 Thread Scipio
Thanks for the clarification, I wanted to make sure it wasn't something I was doing incorrectly. I'll set up a template in Elasticsearch to analyze these fields. On Saturday, April 9, 2016 at 1:01:00 PM UTC, Jochen Schalanda wrote: > > Hi, > > joining the JSON array into a single field is one

[graylog2] Re: Cannot access web-interface with preset login/password

2016-04-11 Thread Jochen Schalanda
Hi Milo, it seems like you're using Windows line terminators ('\r\n') in your configuration file. $ cat -v server.conf.txt | grep root_password_sha2 root_password_sha2=5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8^M Although that shouldn't make a difference, please try

Re: [graylog2] High-Availability Graylog deployment

2016-04-11 Thread ryangrannell
Hi Micheal, I don't think the first URI is necessarily used as primary. I rechecked our source code; setting multiple URIs in mongodb_uri gets around this need. If any of the supplied URIs point to the mongoDb primary, Graylog will work as expected. In our case, it made it irrelevant which