[graylog2] Time frame selector - set default

2016-06-11 Thread Bernie Carolan
The standard default time frame for searches and streams is the last 5 minutes. Using Graylog 2.0.2-1 I tried removing the minute and hour searches under System - Configurations - Search Configuration so that the first in the the list was P1D - Search in the last 1 day. When returning to the

[graylog2] Re: Web Interface Certificate differences from v1 and v2

2016-04-12 Thread Bernie Carolan
I used this format to convert existing keys, seems to work ok. openssl pkcs8 -nocrypt -topk8 -in /etc/pki/tls/private/graylog-server.key -out /etc/pki/tls/private/graylog-server.pk8 On Wednesday, April 13, 2016 at 4:13:15 AM UTC+10, Drew Miranda wrote: > > Any quick tips on the command to use

[graylog2] Extractor Date Format

2016-03-05 Thread Bernie Carolan
Just having an issue extracting the date from a JSON log message. The JSON extractor works fine separating all the fields, but the date is in an incompatible format: timestamp: 2016 Mar 2016 16:55:43 Is there some way of configuring a custom date format for this? -- You received this message

[graylog2] Graylog v2.0-alpha.3 nginx reverse proxy

2016-02-23 Thread Bernie Carolan
I'm trying to get a reverse nginx proxy working for Graylog v2.0-alpha.3 to access Graylog externally. The Nginx settings are as follows: Server { listen 80; server_name example.com; location /api { proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for;

[graylog2] Graylog-ctl scripts manual install

2016-02-17 Thread Bernie Carolan
I have looked through the documentation but cannot find a way of installing the graylog-ctl and associated scripts that are included with the virtual appliance releases. Is there some way of doing this rather than copying off the OVA when doing a manual install? -- You received this message

[graylog2] Re: Function of graylog2-collector

2016-02-16 Thread Bernie Carolan
In comparison to the nxlog to logstash model, is it possible to suppress events that are not required? An example in nxlog would be: Module im_msvistalog Query\ \ *\ *[System[(EventID=4624 or EventID=4776 or EventID=4634 or EventID=4672 or