[graylog2] Re: how to resolve issue with indexer

2017-02-16 Thread Jiří Kolb
lthough in your specific case, I'd recommend converting the "level" field > in Logstash. > > Cheers, > Jochen > > > On Thursday, 16 February 2017 09:12:00 UTC+1, Jiří Kolb wrote: >> >> Hello, >> I have following architecture Logstash -> RabbitMQ

[graylog2] how to resolve issue with indexer

2017-02-16 Thread Jiří Kolb
Hello, I have following architecture Logstash -> RabbitMQ ->Graylog I have issue in indexer with parsing: 17 minutes ago graylog_0 d58fe350-f41b-11e6-8407-000c29438b97 MapperParsingException[failed to parse [level]]; nested: NumberFormatException[For input string: "information"] In logstash

[graylog2] cannot start AMQP input

2017-02-15 Thread Jiří Kolb
Hi, Trying to add AMQP input to connect with RabbitMQ, but input does not start. Can you please help? Following is graylog server log: 2017-02-13_12:36:08.35670 2017-02-13 13:36:08,342 ERROR: org.graylog2.shared.inputs.InputLauncher - The [org.graylog2.inputs.gelf.amqp.GELFAMQPInput] input

[graylog2] winlogbeats and graylog

2017-01-06 Thread Jiří Kolb
Hello, First I would like to thanks this community for prompt answers. I would like to capture logs from windows. I installed winlogbeats and configured beats input on graylog. I can see that connection is estabilished, but I receive no answer. I used wireshark and curl to debug this, but for

[graylog2] Graylog log sources

2017-01-05 Thread Jiří Kolb
Hello, How to captures logs that are stored on database systems? Is there any collector for it? Thank you! -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[graylog2] Multi tenancy

2017-01-05 Thread Jiří Kolb
Hi, just choosing open source solution that is capable of multi tenancy. Does anybody using graylog in MSSP environment? Have not found information regarding multi tenancy. Thank you for your answer! Best Regards, Jiri Kolb -- You received this message because you are subscribed to the