[graylog2] regex search in file path

2016-06-30 Thread Karlis Melderis
hi, guys I have funny search issue my field has string - /some/path/Login/file.txt I can get results if I search like this - log_path:/.?*(ogin).?*/ but not like this log_path:/.?*(Login).?*/ Karlis -- You received this message because you are subscribed to the Google Groups "Graylog Users"

[graylog2] Server currently unavailable (different from issue below)

2016-06-30 Thread Chauncey Neyman
Hello! So I've looked through past forums and haven't found a working solution to my current issue. I'm trying to develop a Graylog plugin, so I began by installing Graylog following the steps for Docker (http://docs.graylog.org/en/2.0/pages/installation/docker.html, because VirtualBox

[graylog2] Geolocation not working

2016-06-30 Thread George Nussbaum
Hello, I just set up geolocation in graylog. I read through the documentation and set up everything as stated. I even ran the test using nc -w0 <<< '8.8.8.8' and that worked fine. However, it's not picking up my IP's and setting latitude and longitude for them. I have field types of

[graylog2] Graylog alerts - X-Forwarded-For showing as 'null'

2016-06-30 Thread George Nussbaum
Hello, I have set up alerting on one of my streams. The alerts come through fine. However, the detailed info within the alert is showing my X-Forwarded-For as a null value. The values show up in a search, so I'm confused as to why it's doing this. Any ideas? -- You received this message

[graylog2] Re: Graylog 2.0 compilation error : Cannot run program "git

2016-06-30 Thread Jochen Schalanda
Hi Anant, you have to make sure that the git binary is on your %PATH% environment (see http://blog.countableset.ch/2012/06/07/adding-git-to-windows-7-path/) and executable. Please take note that we cannot give extensive support for setting up your development environment. You're basically on

[graylog2] Graylog 2.0 compilation error : Cannot run program "git

2016-06-30 Thread Anant Sawant
Hi, I am compiling the Graylog 2.0 on windows 7 using eclipse. I am facing the issue related to "Git" as follows Failed to execute goal org.codehaus.mojo:buildnumber-maven-plugin:1.4:create (default) on project graylog2-server: Cannot get the revision information from the scm repository :

Re: [graylog2] Re: Graylog Does not work on AWS

2016-06-30 Thread 123Dev
That is not true, We have AWS image based deployment (2 graylog servers, 2 datanodes) (production) and one manual install (staging) all working in AWS. REST API access part is a bit flaky and I agree it can benefit from better documentation / code, but Graylog folks have always been proactive

[graylog2] Re: email callback and message.source..

2016-06-30 Thread Jochen Schalanda
Hi Stefan, please read the previous posts I wrote in this thread and the documentation section I've linked to. There is no single message object in the email body but always a collection of messages in the backlog variable which you have to iterate over with foreach. Cheers, Jochen On

[graylog2] Re: email callback and message.source..

2016-06-30 Thread 'Stefan Krüger' via Graylog Users
ok, I am to stupid for this.. the body looks like: ## Alert Description: ${check_result.resultDescription} Date: ${check_result.triggeredAt} Stream ID: ${stream.id} Stream title: ${stream.title} Stream description: ${stream.description} ${if stream_url}Stream URL: ${stream_url}${end}

[graylog2] Re: email callback and message.source..

2016-06-30 Thread Jochen Schalanda
Hi Stefan, you can access any message field inside the email *body* template using the variables described in http://docs.graylog.org/en/2.0/pages/streams.html#email-alert-callback. Cheers, Jochen On Thursday, 30 June 2016 10:08:03 UTC+2, Stefan Krüger wrote: > > Hi Jochen, > > sorry for my

Re: [graylog2] Re: Graylog Does not work on AWS

2016-06-30 Thread Joshua Swanson
The nginx file. I tried setting up two servers, one according to this: http://docs.graylog.org/en/2.0/pages/installation/os/centos.html and one according to this: http://docs.graylog.org/en/2.0/pages/installation/aws.html The first one, does not have nginx, but it does have rest_listen_uri,

[graylog2] Re: email callback and message.source..

2016-06-30 Thread 'Stefan Krüger' via Graylog Users
Hi Jochen, sorry for my bad english. I've a Stream, and i want a message if root is logged in via ssh (that works fine) but i want to see in the email the source/server where the message come from (sshserver1, sshserver2,etc) bests Stefan -- You received this message because you are

[graylog2] Re: help with Gork pattern

2016-06-30 Thread kaiser
'|' stands for a logic OR so you have to escape it with '\|'. srcIP=%{IP:srcip}\|scrPort=%{NUMBER:srcport}\|dstIP=%{IP: dstip}\|dstPort=%{NUMBER:dstport} Le jeudi 30 juin 2016 07:18:30 UTC+2, Keamas M a écrit : > > Hey, > > I log my firewall logs into Graylog. > > The log File looks like this: