[graylog2] Re: Web Interface Certificate differences from v1 and v2

Any quick tips on the command to use with openssl to output the correct format? I found enough documentation to interchange formats but an unclear on the exact switches. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from

[graylog2] Chart treats no sample as 0

Hi, I am using graylog v1.3.4, and I am bit confused about my charts. When I have daily resolution and every day there is a sample, chart is ok. However, once on some day there is no sample, my chart treats lack of sample as a 0 value, and chart is looking very strange. Can I disable this

[graylog2] Can I convert a field from string to integer?

I'm new to this and my scripts were accidentally pouring in data as strings instead of integers. I've fixed that, but now those fields are still set to be strings only. Is there any way for me to override this? -- You received this message because you are subscribed to the Google Groups

[graylog2] Graylog email alert frequency

Hey all, I have a stream that's set to send an email whenever an alert is triggered that matches a channel. The email is received and all is well but graylog seems to group a series of events together before sending the email. Is there any way to change this? Basically I want an email whenever

[graylog2] Re: Web Interface Certificate differences from v1 and v2

I used this format to convert existing keys, seems to work ok. openssl pkcs8 -nocrypt -topk8 -in /etc/pki/tls/private/graylog-server.key -out /etc/pki/tls/private/graylog-server.pk8 On Wednesday, April 13, 2016 at 4:13:15 AM UTC+10, Drew Miranda wrote: > > Any quick tips on the command to use

[graylog2] Load Balancer health check with Big-IP F5

Hi Folks, Graylog V1.3.4 Just wondering if anyone has integrated the Graylog LB state into the F5 native http health check. I can't get this to work when sending: GET /system/lbstatus HTTP/1.1 >From the command line (using netcat) on the graylog node, this also fails. Just get a newline (no

Re: [graylog2] Re: installed marvel - now seemed to have corrupted entire graylog db

Hi Jochen There wasn't any error that pointed at this explicitly. This is graylog-1.3.4 with ES-1.7 on CentOS7. There has been a general degradation as my (single) test box grew to 5TB in size - I think I'm simply tickling all the edge cases of performance issues and this is the consequence. I do

[graylog2] remote sites / servers

I'm bran new to graylog. I have it installed on Ubuntu 14.04 for testing. Here's what I would like to do. We have 5 remote offices. 1. Is there a secure way to send logs from these remote offices? 2. Is there a proxy I can use to collect the data onsite and send it to the main

[graylog2] Re: Check disk usage

Hi, ingesting 200 messages per day (which comes down to ~25 messages per second) isn't that much and should work with pretty standard systems (4 CPUs, 8 GB of memory, disk space depending on average message size). If the disk journal fills up, that usually means that the backend (i. e.

[graylog2] Re: installed marvel - now seemed to have corrupted entire graylog db

Hi Jason, what's your Graylog and Elasticsearch configuration? Are there any error messages in the logs of either Graylog or Elasticsearch? Cheers, Jochen On Monday, 11 April 2016 07:15:17 UTC+2, Jason Haar wrote: > > Hi there > > Over the weekend I installed the ES marvel diagnostics package

[graylog2] Re: Graylog-web time range problem

Hi Hasan, which timezone did you configure for the logged in Graylog user? How exactly are you ingesting logs (GELF, syslog, or other inputs)? Are you sure they come with a proper timestamp (e. g. ISO 8601, including a timezone)? Cheers, Jochen On Tuesday, 12 April 2016 14:34:06 UTC+2, hasan

[graylog2] Graylog-web time range problem

I use graylog-web 1.3.4. I set timezone configuration "Europe /Istanbul" . Time configuration space as everything seems ok. But when I specify a date range of the search area it shows the value back to 1 hour and time stamp column is 1 hours ago shows. For example, my system clock is 15:00 am.

[graylog2] Re: Grok pattern convert to int

Hi Alexey, FWIW, that's a limitation of the dynamic mapping in Elasticsearch. If you want to provide a fixed schema for your data, take a look at https://www.elastic.co/guide/en/elasticsearch/reference/1.7/mapping.html and

[graylog2] Re: Graylog-web time range problem

Hi Jochen, I configured web user timezone "Europe/Istanbul". I get to log gelf protocol. I using graylog-collector product. Yes I'am sure, log source is come with a proper timestamp and time configuration box on graylog-web is seems ok. But timestamp column and search box time is false. if

[graylog2] Web Interface Certificate differences from v1 and v2

Hi all, has anyone had any success converting their TLS ceritificates for graylog web from versions 1 (e.g. 1.3.x) to version 2 of graylog? Maybe I'm just not getting it, but I'm having trouble figuring out EXACTLY what file format the certificate needs to be in. Previously with v1.x web

[graylog2] Re: Web Interface Certificate differences from v1 and v2

Hi Drew, you're right, the migration path from Graylog 1.x to 2.x isn't very clearly documented yet. We'll eventually fix that once Graylog 2.0.0 has been released. The private key has to be in PKCS#8 format stored as PEM (not DER). The X.509 certificate has also be to be stored in PEM

[graylog2] Re: Graylog-web time range problem

Hi Hasan, please provide some example messages, some example search queries (including what you expect what the actual result is), and the time zone configuration you see in the web interface on the System -> Overview page. Cheers, Jochen On Tuesday, 12 April 2016 15:17:52 UTC+2, hasan akgöz