[graylog2] Measuring Time Difference from two messages.

2016-01-29 Thread gabriel . coutinho 
Hi,

Currently I need to measure the time it takes for a message to travel from 
one of our services to the other. The problem here is that I cant simply 
measure the time it took to process the request because there is another 
service in the middle. 
So what i would like is for a way to measure the time difference from two 
messages in the same stream. The messages come from two different sources. 
I haven't been able to figure it out how do i approach this problem. Can I 
accomplish this using graylog? If not does anyone have a suggestions on how 
to do this?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a2195297-444e-442f-9626-838d73075309%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog v1.3.3 Start up FreeBSD

2016-01-29 Thread Jochen Schalanda 
Hi,

I don't see any error message in those logs, so I guess it should work. If 
not, you have to be way more specific…


Cheers,
Jochen

On Friday, 29 January 2016 10:20:25 UTC+1, 90r...@gmail.com wrote:
>
> Look here please! Properly working ???
>
>
> 2016-01-29 17:07:55,196 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added converter factory 
> com.github.joschi.jadconfig.guava.GuavaConverterFactory@224edc67
> 2016-01-29 17:07:55,208 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added converter factory 
> com.github.joschi.jadconfig.jodatime.JodaTimeConverterFactory@5700d6b1
> 2016-01-29 17:07:55,290 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded 
> plugins: [Anonymous Usage Statistics 1.2.1 
> [org.graylog.plugins.usagestatistics.UsageStatsPlugin]]
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean 
> org.graylog.plugins.usagestatistics.UsageStatsConfiguration@3e57cd70
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean org.graylog2.Configuration@9a7504c
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean 
> org.graylog2.configuration.ElasticsearchConfiguration@2c039ac6
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean 
> org.graylog2.configuration.EmailConfiguration@587d1d39
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean 
> org.graylog2.configuration.MongoDbConfiguration@58c1670b
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean 
> org.graylog2.configuration.VersionCheckConfiguration@6b57696f
> 2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
> Added configuration bean 
> org.graylog2.plugin.KafkaJournalConfiguration@5bb21b69
> 2016-01-29 17:07:55,348 INFO : org.graylog2.bootstrap.CmdLineTool - 
> Running with JVM arguments: -Des.pidfile=/var/run/graylog.pid 
> -Djava.awt.headless=true -Xms256m -Xmx1g -XX:NewRatio=1 -XX:+ResizeTLAB 
> -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled 
> -XX:+CMSClassUnloadingEnabled -XX:MaxPermSize=512m -XX:+UseParNewGC 
> -XX:-OmitStackTraceInFastThrow 
> -Djava.library.path=/usr/local/etc/graylog/lib/sigar 
> -Dlog4j.configuration=file:/usr/local/etc/graylog/graylog_logging.xml
> 2016-01-29 17:07:55,982 INFO : 
> org.graylog2.shared.system.stats.SigarService - Failed to load SIGAR. 
> Falling back to JMX implementations.
> 2016-01-29 17:07:57,959 INFO : org.graylog2.shared.buffers.InputBufferImpl 
> - Message journal is enabled.
> 2016-01-29 17:07:58,155 INFO : kafka.log.LogManager - Loading logs.
> 2016-01-29 17:07:58,212 INFO : kafka.log.Log - Completed load of log 
> messagejournal-0 with log end offset 0
> 2016-01-29 17:07:58,246 INFO : kafka.log.LogManager - Logs loading 
> complete.
> 2016-01-29 17:07:58,246 INFO : org.graylog2.shared.journal.KafkaJournal - 
> Initialized Kafka based journal at data/journal
> 2016-01-29 17:07:58,262 INFO : org.graylog2.shared.buffers.InputBufferImpl 
> - Initialized InputBufferImpl with ring size <65536> and wait strategy 
> , running 2 parallel message handlers.
> 2016-01-29 17:07:58,534 INFO : org.graylog2.plugin.system.NodeId - Node 
> ID: c352c7dc-a077-41e0-85bd-a2f83232cfc7
> 2016-01-29 17:07:58,693 INFO : org.elasticsearch.node - [graylog2-server] 
> version[1.7.3], pid[80816], build[05d4530/2015-10-15T09:14:17Z]
> 2016-01-29 17:07:58,693 INFO : org.elasticsearch.node - [graylog2-server] 
> initializing ...
> 2016-01-29 17:07:58,791 INFO : org.elasticsearch.plugins - 
> [graylog2-server] loaded [graylog-monitor], sites []
> 2016-01-29 17:08:01,003 INFO : org.elasticsearch.node - [graylog2-server] 
> initialized
> 2016-01-29 17:08:01,068 INFO : 
> org.hibernate.validator.internal.util.Version - HV01: Hibernate 
> Validator 5.2.2.Final
> 2016-01-29 17:08:01,215 INFO : org.graylog2.shared.buffers.ProcessBuffer - 
> Initialized ProcessBuffer with ring size <65536> and wait strategy 
> .
> 2016-01-29 17:08:02,581 INFO : 
> org.drools.compiler.kie.builder.impl.KieRepositoryImpl - KieModule was 
> added: MemoryKieModule[releaseId=org.graylog2:dynamic-rules:0]
> 2016-01-29 17:08:02,584 INFO : 
> org.drools.compiler.kie.builder.impl.KieRepositoryImpl - Adding KieModule 
> from resource: ByteArrayResource[bytes=[80, 75, 3, 4, 20, 0, 8, 8, 8, 0, 
> ...], encoding=null]
> 2016-01-29 17:08:02,679 INFO : 
> org.drools.compiler.kie.builder.impl.KieRepositoryImpl - KieModule was 
> added: MemoryKieModule[releaseId=org.graylog2:dynamic-rules:0]
> 2016-01-29 17:08:03,050 INFO : 
> org.graylog2.bindings.providers.RulesEngineProvider - No static rules file 
> loaded.
> 2016-01-29 17:08:03,094 INFO : org.graylog2.buffers.OutputBuffer - 
> Initialized OutputBuffer with ring size <65536> and wait strategy 
> .
> 2016-01-29 17:08:03,762 INFO : org.graylog2.bootstrap.ServerBootstrap - 
> Graylog server

[graylog2] Re: Graylog Web Compilation

2016-01-29 Thread Anant Sawant 
Hi All,

I am pretty stuck on this issue, not able to compile the changes made using 
"TypeSafe Activator". Please point me somewhere to overcome this isssue.

Thanks in Advance.
Anant.

On Thursday, 28 January 2016 20:32:00 UTC+5:30, Anant Sawant wrote:
>
>
> Hi All,
>
> I have been using typesafe activator version 1.3.5 to compile Graylog Web 
> Component. But it is not working efficiently, sometime it compiles the file 
> and sometime it do not.
> Form today I am facing this issue. Also can anyone please point me to any 
> other tool or method to compile Graylog web component.
>
> Thanks in advance!!
> Anant
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/59be2ca9-ff8a-4d32-8d84-74a6ef5d3591%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog Web Compilation

2016-01-29 Thread Jochen Schalanda 
Hi Anant,

you don't need to use Typesafe Activator to compile the Graylog web 
interface. Take a look at the build_release.sh 

 
script to see how we (and Travis CI) are building the web interface from 
source.


Cheers,
Jochen

On Friday, 29 January 2016 11:52:11 UTC+1, Anant Sawant wrote:
>
> Hi All,
>
> I am pretty stuck on this issue, not able to compile the changes made 
> using "TypeSafe Activator". Please point me somewhere to overcome this 
> isssue.
>
> Thanks in Advance.
> Anant.
>
> On Thursday, 28 January 2016 20:32:00 UTC+5:30, Anant Sawant wrote:
>>
>>
>> Hi All,
>>
>> I have been using typesafe activator version 1.3.5 to compile Graylog Web 
>> Component. But it is not working efficiently, sometime it compiles the file 
>> and sometime it do not.
>> Form today I am facing this issue. Also can anyone please point me to any 
>> other tool or method to compile Graylog web component.
>>
>> Thanks in advance!!
>> Anant
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/b7c0e116-cfeb-4dfc-9880-1920dbb2c68b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: OVA 1.0.2 to 1.3.3 upgrade

2016-01-29 Thread Jochen Schalanda 
Hi Rangarasan,

you can upgrade directly from Graylog 1.0.2 to Graylog 1.3.3. There's no 
use in upgrading to an intermittent version first.

Make sure to read the change log 
 and the referenced 
blog posts (which contain upgrade notes) before doing the upgrade.


Cheers,
Jochen

On Thursday, 28 January 2016 19:34:08 UTC+1, Rangarasan N wrote:
>
> Alright. Thanks.
>
> I have a small clarification regarding upgrade.
>
> 1. Upgrade from v1.0.2 -> v1.2.0 -> v1.3.3 
>
> 2. Upgrade from v1.0.2 -> v1.3.3 
>
> What's is the best way to upgrade? 
>
> Option 2? Or Upgrading to intermediate versions and then upgrade to latest?
>
> May we get any compatibility issues on upgrading from v1.0.2 to v1.3.3.?
>
> I am looking forward your thoughts geeks!
>
> Thanks for all your help :)
>
> Best Regards,
> Rangarasan
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a8de0a6b-d5c7-43e2-b5bd-dbe8bc6389c7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Renaming fields

2016-01-29 Thread thePretender 
Hi,

For normalization purposes, I want to rename certian fields from a 
JSON-extracted message. I have tried using the copy input extractor and 
make it cut the field, and that seems to work. However, I am left with both 
the new field with the correct value, and the old field with the value 
"fullyCutByExtractor", why isn't this being removed? That seems rather 
ineffective.

regards,
thePretender

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/cc775d64-a297-49a4-9e7b-f427c776dcb8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog v1.3.3 Start up FreeBSD

2016-01-29 Thread 90rootr 
Look here please! Properly working ???


2016-01-29 17:07:55,196 INFO : com.github.joschi.jadconfig.JadConfig - 
Added converter factory 
com.github.joschi.jadconfig.guava.GuavaConverterFactory@224edc67
2016-01-29 17:07:55,208 INFO : com.github.joschi.jadconfig.JadConfig - 
Added converter factory 
com.github.joschi.jadconfig.jodatime.JodaTimeConverterFactory@5700d6b1
2016-01-29 17:07:55,290 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded 
plugins: [Anonymous Usage Statistics 1.2.1 
[org.graylog.plugins.usagestatistics.UsageStatsPlugin]]
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean 
org.graylog.plugins.usagestatistics.UsageStatsConfiguration@3e57cd70
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean org.graylog2.Configuration@9a7504c
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean 
org.graylog2.configuration.ElasticsearchConfiguration@2c039ac6
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean 
org.graylog2.configuration.EmailConfiguration@587d1d39
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean 
org.graylog2.configuration.MongoDbConfiguration@58c1670b
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean 
org.graylog2.configuration.VersionCheckConfiguration@6b57696f
2016-01-29 17:07:55,294 INFO : com.github.joschi.jadconfig.JadConfig - 
Added configuration bean 
org.graylog2.plugin.KafkaJournalConfiguration@5bb21b69
2016-01-29 17:07:55,348 INFO : org.graylog2.bootstrap.CmdLineTool - Running 
with JVM arguments: -Des.pidfile=/var/run/graylog.pid 
-Djava.awt.headless=true -Xms256m -Xmx1g -XX:NewRatio=1 -XX:+ResizeTLAB 
-XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled 
-XX:+CMSClassUnloadingEnabled -XX:MaxPermSize=512m -XX:+UseParNewGC 
-XX:-OmitStackTraceInFastThrow 
-Djava.library.path=/usr/local/etc/graylog/lib/sigar 
-Dlog4j.configuration=file:/usr/local/etc/graylog/graylog_logging.xml
2016-01-29 17:07:55,982 INFO : 
org.graylog2.shared.system.stats.SigarService - Failed to load SIGAR. 
Falling back to JMX implementations.
2016-01-29 17:07:57,959 INFO : org.graylog2.shared.buffers.InputBufferImpl 
- Message journal is enabled.
2016-01-29 17:07:58,155 INFO : kafka.log.LogManager - Loading logs.
2016-01-29 17:07:58,212 INFO : kafka.log.Log - Completed load of log 
messagejournal-0 with log end offset 0
2016-01-29 17:07:58,246 INFO : kafka.log.LogManager - Logs loading complete.
2016-01-29 17:07:58,246 INFO : org.graylog2.shared.journal.KafkaJournal - 
Initialized Kafka based journal at data/journal
2016-01-29 17:07:58,262 INFO : org.graylog2.shared.buffers.InputBufferImpl 
- Initialized InputBufferImpl with ring size <65536> and wait strategy 
, running 2 parallel message handlers.
2016-01-29 17:07:58,534 INFO : org.graylog2.plugin.system.NodeId - Node ID: 
c352c7dc-a077-41e0-85bd-a2f83232cfc7
2016-01-29 17:07:58,693 INFO : org.elasticsearch.node - [graylog2-server] 
version[1.7.3], pid[80816], build[05d4530/2015-10-15T09:14:17Z]
2016-01-29 17:07:58,693 INFO : org.elasticsearch.node - [graylog2-server] 
initializing ...
2016-01-29 17:07:58,791 INFO : org.elasticsearch.plugins - 
[graylog2-server] loaded [graylog-monitor], sites []
2016-01-29 17:08:01,003 INFO : org.elasticsearch.node - [graylog2-server] 
initialized
2016-01-29 17:08:01,068 INFO : 
org.hibernate.validator.internal.util.Version - HV01: Hibernate 
Validator 5.2.2.Final
2016-01-29 17:08:01,215 INFO : org.graylog2.shared.buffers.ProcessBuffer - 
Initialized ProcessBuffer with ring size <65536> and wait strategy 
.
2016-01-29 17:08:02,581 INFO : 
org.drools.compiler.kie.builder.impl.KieRepositoryImpl - KieModule was 
added: MemoryKieModule[releaseId=org.graylog2:dynamic-rules:0]
2016-01-29 17:08:02,584 INFO : 
org.drools.compiler.kie.builder.impl.KieRepositoryImpl - Adding KieModule 
from resource: ByteArrayResource[bytes=[80, 75, 3, 4, 20, 0, 8, 8, 8, 0, 
...], encoding=null]
2016-01-29 17:08:02,679 INFO : 
org.drools.compiler.kie.builder.impl.KieRepositoryImpl - KieModule was 
added: MemoryKieModule[releaseId=org.graylog2:dynamic-rules:0]
2016-01-29 17:08:03,050 INFO : 
org.graylog2.bindings.providers.RulesEngineProvider - No static rules file 
loaded.
2016-01-29 17:08:03,094 INFO : org.graylog2.buffers.OutputBuffer - 
Initialized OutputBuffer with ring size <65536> and wait strategy 
.
2016-01-29 17:08:03,762 INFO : org.graylog2.bootstrap.ServerBootstrap - 
Graylog server 1.3.3 (0fda9dc) starting up
2016-01-29 17:08:03,762 INFO : org.graylog2.bootstrap.ServerBootstrap - 
JRE: Oracle Corporation 1.8.0_66 on FreeBSD 10.2-RELEASE-p1
2016-01-29 17:08:03,762 INFO : org.graylog2.bootstrap.ServerBootstrap - 
Deployment: unknown
2016-01-29 17:08:03,762 INFO : org.graylog2.bootstrap.ServerBootstrap - OS: 
FreeBSD
2016-01-29 17:08:03,762 INFO :