[graylog2] Copy input extractor failure

Hi All, I created “Copy Input” extractor to get key value pair, here is my message, trying to extract level and status from all the messages 2016-09-28 19:21:52,466 level=INFO tag="run_workflow.py" msg="Run complete for appname=cils, job_date=20160912, status=Passed starttime=Wed Sep 28

[graylog2] graylog not working after upgrading to v2.2.0 from 2.1.2

Hi, I have two graylog servers clustered. One is configured as the master with full configuration the other as bakend-server. I upgraded both virtual appliances from 2.1.2 to 2.2.0. Before the upgrade everything was working fine. Now i have multiple errors and no logs show when searching.

Re: [graylog2] Re: Multiline message problems

Multiline regex does not need to match entire message. We have Elastic support, so I turned to them for Filebeat help. The only thing I was missing was checking the negate checkbox (still not entirely sure what it does). Now it works perfectly fine with all of our messages. --ab On Fri, Feb 17,

Re: [graylog2] Re: Multiline message problems

Hej Andy, maybe you should separate the multiple messages you have by type into different log files to be able to have one pattern for every logfile. I didn’t dig into NXLog that deep but again - someone in the NXLog community might help with that.  /jd From: Andrew Badera

Re: [graylog2] Re: Multiline message problems

Hi Jan, Thanks for the reply. Before I share our million different log messages, can we discuss on the basis that a single regex won't capture our messages? We have multiline exceptions, multiline SQL statements, multiline various other types of messages. If NXLog multiline handling is stronger,

[graylog2] Re: Troubleshooting logs

Hi Tom, On Friday, 17 February 2017 00:41:03 UTC+1, Tom Powers wrote: > > I've found this article on the right place to put the certs...but not sure > what format or how to get them out of the master server > > >

[graylog2] Re: How to upgrade Graylog 2.1 > 2.2 ?

Hey! Okay, thank you! This is extremely valuable information. Br, Henri On Friday, 17 February 2017 10:52:05 UTC+2, Jan Doberstein wrote: > > Hej Henri, > > this will be the best method for upgrading your environment. > > with kind regards > Jan > > On Thursday, February 16, 2017 at 7:18:24 PM

[graylog2] Re: How to upgrade Graylog 2.1 > 2.2 ?

Hej Henri, this will be the best method for upgrading your environment. with kind regards Jan On Thursday, February 16, 2017 at 7:18:24 PM UTC+1, Henri Volotinen wrote: > > Hi, > > So rolling upgrade is not supported? Good to know, because I was going to > upgrade our production setup (with 3

[graylog2] Re: Multiline message problems

Hej Andy, if you want help with the multiline detection of filebeat, we would need to have some information about your logfile. examples welcome. with your question about nxlog the limit for one message is reached - you would need to configure this limit. But for this the NXLog Community might