[graylog2] graylog newbie questions

2015-08-24 Thread Edward Ned Harvey
I am confused about what to expect graylog to be, and how to use it - I have two use cases: (1) A single server runs httpd, mysqld, and a few other services (sshd etc). I could use logwatch to parse the logs, but logwatch alerts me to a lot of normal stuff like 404's served from httpd and I

[graylog2] GrayLog Source Code Compilation Error

2015-08-24 Thread Anant Sawant
Hi All !!, I am a newbie to graylog. I am trying to compile the graylog source code which I have downloaded from https://github.com/Graylog2/graylog2-serve https://github.com/Graylog2/graylog2-server. I have imported this code into eclipse(Luna) and using m2e to build the project. I faced some

[graylog2] Re: extractor impact on performance

2015-08-24 Thread HappyDaysInfo
Hi Jamie, For information , and concerning my first experience using graylog, I 've defined an input udp syslog with haproxy extractirs (and I have checked all extrators). An haproxy Aloha forward messages in 5514 ports and I have noticied , something strange: I must wait perhaps 1 hour,

[graylog2] Re: How to setup Graylog code on eclipse.

2015-08-24 Thread Anant Sawant
Hi Ganagadhar, I a new to Graylog and was on the same page, but did imported the project into eclipse. Now when I am trying to build the project using clean install I am geeting the following error. Failed to execute goal on project graylog2-bootstrap: Could not resolve dependencies for

[graylog2] Re: How to setup Graylog code on eclipse.

2015-08-24 Thread Jochen Schalanda
Hi Anant, your version of Java is too old. Please upgrade to a recent version of Java 8 (as Java 7 has reached EOL). Cheers, Jochen On Monday, 24 August 2015 10:10:51 UTC+2, Anant Sawant wrote: Hi Ganagadhar, I a new to Graylog and was on the same page, but did imported the project into

[graylog2] Re: extractor impact on performance

2015-08-24 Thread Jochen Schalanda
Hi, please don't hijack old mailing list threads. You can always open a new oneā€¦ Currently there's pretty much only the org.graylog2.filters.ExtractorFilter.executionTime metric (see http://localhost:12900/system/metrics/org.graylog2.filters.ExtractorFilter.executionTime?pretty=true) which

[graylog2] AWS Cloudtrail plugin issue with multiple regions?

2015-08-24 Thread Jason Haar
Hi there I went through the documentation for setting up the Cloudtrail plugin for US-WEST-2 and US-EAST-1 and got it all working - the Cloudtrail records showed up in graylog/elasticsearch Then I configured the same S3 bucket for all the other regions - and AWS console shows a new hierarchy of

[graylog2] Re: are there standard field names?

2015-08-24 Thread Jochen Schalanda
Hi Jason, other than the mandatory fields described in the GELF specification ( https://www.graylog.org/resources/gelf) there are no default message fields in Graylog. Cheers, Jochen On Monday, 24 August 2015 11:10:00 UTC+2, Jason Haar wrote: Hi there I've been testing graylog for a few

[graylog2] are there standard field names?

2015-08-24 Thread Jason Haar
Hi there I've been testing graylog for a few weeks now and I think I'm noticing a few gotchas I've whacked myself with. eg I saw an example extractor that created a src_ip field - that mapped to an IP address. Well, I thought, that's no good - it's only matches IPv4 addresses, so since then I've