[graylog2] [ANNOUNCE] Graylog v2.2.0-beta.3

2016-12-22 Thread Lennart Koopmann
Hi everyone, the Graylog v2.2.0-beta.3 release is now available for download. Announcement blog post: * https://www.graylog.org/blog/78-announcing-graylog-v2-2-0-beta-3 For a more complete overview of new features, please refer to the beta.2 blog post:

[graylog2] Re: Alerts based on schedule

2016-12-22 Thread BKeep
Thanks, I will look into that. Has anyone had experience with https://github.com/ustream/openduty? I think I might try that out but am curious if anyone has used it for anything. Regards, Brandon On Thursday, December 22, 2016 at 8:01:34 AM UTC-6, Jochen Schalanda wrote: > > Hi Brandon, > >

[graylog2] Re: Alerts based on schedule

2016-12-22 Thread Jochen Schalanda
Hi Brandon, I'd recommend outsourcing more complex alerting logic to dedicated services like PagerDuty or OpsGenie. See https://marketplace.graylog.org/addons?tag=alarm for available integrations on the Graylog Marketplace. Cheers, Jochen On Thursday, 22 December 2016 02:32:34 UTC+1, BKeep

[graylog2] Re: graylog - filebeat logging

2016-12-22 Thread Jochen Schalanda
Hi, On Thursday, 22 December 2016 11:33:06 UTC+1, mytempledarkstar wrote: > > Do You have andy advice that stop collect linst when appears finish of > sql. I have to catch everything after timestamp and stop collecting after > finish sql. After sql can appear anything. > If you have any access

[graylog2] Re: Cors, preflight Options 405 - Method not allowed

2016-12-22 Thread Jochen Schalanda
Hi Hesyar, as already explained on IRC, the GELF HTTP input currently doesn't support HTTP OPTIONS requests. This will (most likely) be fixed in Graylog 2.2.0: https://github.com/Graylog2/graylog2-server/pull/3234 Cheers, Jochen On Thursday, 22 December 2016 11:38:52 UTC+1, Hesyar Uzuner

[graylog2] Re: Error - the server returned: 404 - cannot POST

2016-12-22 Thread Evgeniy Danilenko
Hi Jochen, sorry for long reply, but server in production and it took some time to test yours suggestions. We rebuild configuration files and now it works! Final configuration of apache2 vhost: ServerAdmin ad...@graylog.site.org ServerName graylog.site.org

[graylog2] Graylog - Edit extractor - Slow

2016-12-22 Thread Florent Delvaille
Hello, We've an Input configured for our Network logs (Average of 500messages/sec, and kept for about 6months). We have 2 elasticsearch servers, and 4 shards. Everything is running quite smoothly, except when we want to Edit an extractor. The moment we click on it, the load average of ES

[graylog2] Graylog 2.1 SSO Plugin with Shibboleth

2016-12-22 Thread Florent Delvaille
Hello all, I'm currently trying to use Graylog 2.1 with Shibboleth and SSO via our ADFS, but I have issues and cannot find enough information to make it work. So, let's try here :) I've correctly installed the sso-plugin (https://github.com/Graylog2/graylog-plugin-auth-sso). Also, I've

[graylog2] Re: graylog - filebeat logging

2016-12-22 Thread Jochen Schalanda
Hi, I'd recommend matching the timestamp as start of the log entry, e. g. "2016-12-05 14:07:45,399" would be matched by "\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{1,3}". See https://www.elastic.co/guide/en/beats/filebeat/current/multiline-examples.html for some examples. Cheers, Jochen On

[graylog2] Re: Setting up retention of logs at 6 months with Graylog2 OVA install

2016-12-22 Thread Jochen Schalanda
Hi Dustin, On Thursday, 22 December 2016 05:21:20 UTC+1, Dustin O'Bier wrote: > > Hoping for some guildance with setting up our graylog2 server retention > policy right now it is not deleting logs would like to save 6 months of > logs and delete the rest. Please help. > You can configure this