[graylog2] Re: No 'Beats Input' available to receive sidecar data.

2017-02-20 Thread Jochen Schalanda
Hi Chris, On Tuesday, 21 February 2017 00:46:35 UTC+1, Chris Thompson wrote: > > 2017-02-20_23:31:59.44325 INFO [CmdLineTool] Loaded plugins: [Anonymous > Usage Statistics 1.2.1 > [org.graylog.plugins.usagestatistics.UsageStatsPlugin]] > The Anonymous Usage Statistics plugin 1.2.1 was written

[graylog2] Re: No 'Beats Input' available to receive sidecar data.

2017-02-20 Thread Jochen Schalanda
Hi Chris, how exactly did you install (and upgrade) Graylog? It looks like you're using an incompatible version of the Beats plugin. The correct version of the Beats plugin is shipped with Graylog and can also be downloaded from

[graylog2] No 'Beats Input' available to receive sidecar data.

2017-02-20 Thread Chris Thompson
I installed the plugin to my Graylog 2.2 appliance (I'm still testing) and restarted the services. I keep getting pointed to this doc: http://docs.graylog.org/en/2.1/pages/collector_sidecar.html#step-by-step-guide However, the first step in that doc is to make a 'Global Beats Input'. 'Beats'

[graylog2] Re: use 1 minute Timerange not working

2017-02-20 Thread vadimv Vatlin
For example I made an alert. My stream had some messages, I created an alert *Configuration:* Alert is triggered when there are more than 2 messages in the last minute. Grace period: 1 minute. Including last message in alert notification. But this alert has never been triggered. Another

[graylog2] Re: use 1 minute Timerange not working

2017-02-20 Thread Jochen Schalanda
Hi, what exactly do you mean with "both of them don't work"? How did you configure the alert conditions? What did you expect to happen? What did actually happen? Cheers, Jochen On Monday, 20 February 2017 16:20:43 UTC+1, vadimv Vatlin wrote: > > Hello. > > I have some strange problem. > > I

[graylog2] Re: bytes can be at most 32766 in length

2017-02-20 Thread Paul Pretorius
Raised in Community Forum Instead : https://community.graylog.org/t/beats-input-bytes-can-be-at-most-32766-in-length/147 On Monday, 20 February 2017 12:57:38 UTC, Paul Pretorius wrote: > Hi Guys > > I've deployed Graylog to use for a syslog solution. Currently using > Sidecar to do

[graylog2] use 1 minute Timerange not working

2017-02-20 Thread vadimv Vatlin
Hello. I have some strange problem. I try to use 1 minute time range in alerts and dashboard count widget, and both of them don't work. Timerange:{ "type": "relative", "range": 60 } server.conf:alert_check_interval = 30 what is the problem? -- You received this message because you are

[graylog2] list-unsubscribe

2017-02-20 Thread STARNES, CURTIS
list-unsubscribe -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit

[graylog2] Re: [UpdateRegistration] Failed to report collector status to server:

2017-02-20 Thread NeefRoel
Thanks for the quick response. But as I said, the service is running behind a reverse proxy, which proxies the tcp 80 to tcp 9000. Even so.. Because this is the 'first' server I've also used a direct link to this server over port 9000, which results in the same messages being logged. Cheers,

Re: [graylog2] [UpdateRegistration] Failed to report collector status to server:

2017-02-20 Thread NeefRoel
Thanks for the quick response. But as I said, the service is running behind a reverse proxy, which proxies the tcp 80 to tcp 9000. Even so.. Because this is the 'first' server I've also used a direct link to this server over port 9000, which results in the same messages being logged. Cheers,

Re: [graylog2] [UpdateRegistration] Failed to report collector status to server:

2017-02-20 Thread Marius Sturm
Hi, the Graylog api is typically listening on port 9000, so the server_url is most likely: http://my.fqdn.hostname:9000/api/ Cheers, Marius On 20 February 2017 at 14:18, NeefRoel wrote: > Hi, > > I've installed the graylog server version 2.2.0-11 on one server and the >

[graylog2] [UpdateRegistration] Failed to report collector status to server:

2017-02-20 Thread NeefRoel
Hi, I've installed the graylog server version 2.2.0-11 on one server and the collector-sidecar v0.0.9-1 on another. I have succesfully send log events to the graylog server and am able to see them. I was now finetuning the client and I noticed that the client is telling me that it is unable

[graylog2] bytes can be at most 32766 in length

2017-02-20 Thread Paul Pretorius
Hi Guys I've deployed Graylog to use for a syslog solution. Currently using Sidecar to do the collections of winlogs only. Been running a week and started loading some more hosts ... Then Pooof, graylog fell over. Initially I was clueless as to whats going on. After a bit of

Re: [graylog2] Re: Graylog V2.1.2 - getting GELF HTTP working with simple HTTP POST/JSON body

2017-02-20 Thread Lisa Deng
A year or so late, but I was using this helpful thread to get graylog working in docker. For future readers: I ended up publishing the ports in the docker-compose file, and it worked, no problem. It was correctly published. I am on ubuntu and I did NOT have to download kitematic. After

[graylog2] graylog collector sidecar and winloigbeat language issue

2017-02-20 Thread Daniel KamiƄski
Hi I'm collecting logs from Windows Serwer 2012 R2 using graylog collector sidecar with winlogbeat, and I have issues with logs language. The system was installed as Polish (my language) but later we changed language to English, now everything is in English except messages sent by winlogbeat

[graylog2] Re: Global kafka input doesn't work.

2017-02-20 Thread Jochen Schalanda
Hi Art, are there any error messages in the logs of your Graylog nodes? Cheers, Jochen On Friday, 17 February 2017 00:30:39 UTC+1, Art Star wrote: > > Hey guys, > > I'm trying to configure two graylog servers to read from the same topic in > kafka. But when I choose global input, only one of

[graylog2] Re: Remove field using extractos

2017-02-20 Thread Jochen Schalanda
Hi Rui, On Tuesday, 14 February 2017 16:24:55 UTC+1, Rui Goncalves wrote: > > What am I missing? I think there must be something that I'm missing, > because we can route the same message to multiple streams. > This sounds like an incorrect message processor order. Check the order of your

[graylog2] [INFO] Google Group shutdown on Feb 21, 2017

2017-02-20 Thread Jochen Schalanda
Hi everyone, just a timely reminder that this Google Group will be set to read-only on Feb 21, 2017 and will be replaced by the official Graylog Community Forums . If you have any open threads on this mailing list, please create a corresponding topic on the