[graylog2] GrayLog Source Code Compilation Error
Hi All !!,
I am a newbie to graylog. I am trying to compile the graylog source code
which I have downloaded from https://github.com/Graylog2/graylog2-serve
https://github.com/Graylog2/graylog2-server. I have imported this code into
eclipse(Luna) and using m2e to build the project. I faced some issues while
compiling(actually doing maven build) it which I have resolved but this one
I am really stuck with. Below is the snippet of the error I am getting.
Tests in error:
UdpTransportTest.transportReceivesDataExactlyRecvBufferSize:111 »
ConditionTimeout
Tests run: 61, Failures: 0, Errors: 1, Skipped: 2
[INFO]
[INFO] Reactor Summary:
[INFO]
[INFO] Graylog ... SUCCESS [ 5.539
s]
[INFO] graylog2-plugin ... SUCCESS [ 19.167
s]
[INFO] graylog2-inputs ... FAILURE [ 10.261
s]
[INFO] graylog2-rest-models .. SKIPPED
[INFO] graylog2-shared ... SKIPPED
[INFO] graylog2-bootstrap SKIPPED
[INFO] graylog2-radio SKIPPED
[INFO] graylog2-server ... SKIPPED
[INFO] graylog2-rest-routes .. SKIPPED
[INFO] graylog2-rest-client .. SKIPPED
[INFO] integration-tests . SKIPPED
[INFO]
[INFO] BUILD FAILURE
[INFO]
[INFO] Total time: 35.136 s
[INFO] Finished at: 2015-08-24T20:38:48+05:30
[INFO] Final Memory: 30M/90M
[INFO]
[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-surefire-plugin:2.18.1:test (default-test)
on project graylog2-inputs: There are test failures.
[ERROR]
[ERROR] Please refer to
D:\Anant\GrayLog\graylog2-server-master\graylog2-inputs\target\surefire-reports
for the individual test results.
[ERROR] - [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
I am not getting any document to overcome this. I have also googled this
issue but no luck so far. Have attcahed the complete log file for referal.
Help is highly appreciated.
Thanks in advance!!
--
You received this message because you are subscribed to the Google Groups
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/a3a63942-6a88-43ba-95e6-77ac446d58fb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[INFO] Scanning for projects...
[WARNING]
[WARNING] Some problems were encountered while building the effective model for
org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT
[WARNING] 'dependencyManagement.dependencies.dependency.systemPath' for
org.kie:kie-api:jar should not point at files within the project directory,
${basedir}/src/lib/kie-api-6.2.0.Final.jar will be unresolvable by dependent
projects @ org.graylog2:graylog2-parent:1.2.0-SNAPSHOT,
D:\Anant\GrayLog\graylog2-server-master\pom.xml, line 239, column 29
[WARNING]
[WARNING] Some problems were encountered while building the effective model for
org.graylog2:graylog2-shared:jar:1.2.0-SNAPSHOT
[WARNING] 'dependencyManagement.dependencies.dependency.systemPath' for
org.kie:kie-api:jar should not point at files within the project directory,
${basedir}/src/lib/kie-api-6.2.0.Final.jar will be unresolvable by dependent
projects @ org.graylog2:graylog2-parent:1.2.0-SNAPSHOT,
D:\Anant\GrayLog\graylog2-server-master\pom.xml, line 239, column 29
[WARNING] 'dependencyManagement.dependencies.dependency.systemPath' for
org.kie:kie-api:jar refers to a non-existing file
D:\Anant\GrayLog\graylog2-server-master\graylog2-shared\src\lib\kie-api-6.2.0.Final.jar
@ org.graylog2:graylog2-parent:1.2.0-SNAPSHOT,
D:\Anant\GrayLog\graylog2-server-master\pom.xml, line 239, column 29
[WARNING]
[WARNING] Some problems were encountered while building the effective model for
org.graylog2:graylog2-server:jar:1.2.0-SNAPSHOT
[WARNING] 'dependencyManagement.dependencies.dependency.systemPath' for
org.kie:kie-api:jar should not point at files within the project directory,
${basedir}/src/lib/kie-api-6.2.0.Final.jar will be unresolvable by dependent
projects @ org.graylog2:graylog2-parent:1.2.0-SNAPSHOT,
D:\Anant\GrayLog\graylog2-server-master\pom.xml, line 239, column 29
[WARNING] 'dependencies.dependency.systemPath' for org.kie:kie-api:jar refers
to a non-existing file
[graylog2] Re: How to setup Graylog code on eclipse.
Hi Ganagadhar, I a new to Graylog and was on the same page, but did imported the project into eclipse. Now when I am trying to build the project using clean install I am geeting the following error. Failed to execute goal on project graylog2-bootstrap: Could not resolve dependencies for project org.graylog2:graylog2-bootstrap:jar:1.2.0-SNAPSHOT: Failed to collect dependencies at org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT - org.kie:kie-api:jar:6.2.0.Final: Failed to read artifact descriptor for org.kie:kie-api:jar:6.2.0.Final: Could not transfer artifact org.jboss.dashboard-builder:dashboard-builder-bom:pom:6.2.0.Final from/to jboss-public-repository-group (https://repository.jboss.org/nexus/content/groups/public/): java.lang.RuntimeException: Could not generate DH keypair: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive) - [Help 1] Not able to figure out how to resolve this. Do you have any ideas. Thanks in Advance. : -) On Thursday, 6 August 2015 13:13:16 UTC+5:30, Jochen Schalanda wrote: Hi Gangadhar, Graylog is using Maven as its build system, so using M2Eclipse ( https://eclipse.org/m2e/) it should be pretty easy to import the project into Eclipse. FWIW, it's working out of the box with IntelliJ IDEA ( https://www.jetbrains.com/idea/). Cheers, Jochen On Wednesday, 5 August 2015 23:51:34 UTC+2, g4gr...@gmail.com wrote: Hi I'm new to Graylog and would like to setup the project in eclipse to learn more about. Is there any link/documentation where i can setup locally? Thanks -Gangadhar -- You received this message because you are subscribed to the Google Groups Graylog Users group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0d9112d7-e21c-4d71-b121-f74ebf324eb7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Graylog On Apache
Hi, I am a newbie to Graylog and I have one question regarding Graylog installation. Is it possible to install Graylog on Apache??. As I need to integrate it with other project which is running on Apache. Thanks in Advance!! Anant :-) -- You received this message because you are subscribed to the Google Groups Graylog Users group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/6f48dbcc-2d7b-4eb2-a05a-c1d8a1d4c1c6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Bundeling/copying all executable jars after comiling graylog
Hi, I have successfully compiled the Graylog server component (it wasn't easy)by running maven clean install on the parent module namely graylog2-parent in eclipse using m2e. After compilation, in the m2e repository the multiple executable jars for respective modules (10 modules) are created. I was expecting that I will get only one executable jar(one complete Graylog jar). Do I have to bundel all the jars to into one to get the single jar or am I missing something??. Also the packaging type of the parent is POM which cannot be changed to jar as Project Aggregation is used . So how do I get the executable jar for Graylog after compilation??. Do I have to bundle all the jars to into one to get the single jar or is there any other way?. Thanks in Advance. Anant :-) -- You received this message because you are subscribed to the Google Groups Graylog Users group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ea1fdb4b-2eeb-4a70-9291-efb5b78617f6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [graylog2] Re: How to setup Graylog code on eclipse.
HI Jochen,
Well I have moved to java 8 now. Thanks for the advice. But the error still
persist. Just for details I am trying to build[clean install] graylog on
windows 7 machine using eclipse luna.
I have attached the log and also the reports generated for the same.
Following is the error I am getting
Failed to execute goal on project graylog2-bootstrap: Could not resolve
dependencies for project org.graylog2:graylog2-
bootstrap:jar:1.2.0-SNAPSHOT: Failed to collect dependencies at
org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT -
org.kie:kie-api:jar:6.2.0.Final: Failed to read artifact descriptor for
org.kie:kie-api:jar:6.2.0.Final: Could not transfer artifact
org.jboss.dashboard-builder:dashboard-builder-bom:pom:6.2.0.Final from/to
jboss-public-repository-group (
https://repository.jboss.org/nexus/content/groups/public/):
java.lang.RuntimeException: Could not generate DH keypair: Prime size must
be multiple of 64, and can only range from 512 to 1024 (inclusive) - [Help
1]
Any Ideas on the same.
Please find the attachments.
Thanks in Advance.
Anant.
On Mon, Aug 24, 2015 at 1:49 PM, Jochen Schalanda joc...@graylog.com
wrote:
Hi Anant,
your version of Java is too old. Please upgrade to a recent version of
Java 8 (as Java 7 has reached EOL).
Cheers,
Jochen
On Monday, 24 August 2015 10:10:51 UTC+2, Anant Sawant wrote:
Hi Ganagadhar,
I a new to Graylog and was on the same page, but did imported the project
into eclipse.
Now when I am trying to build the project using clean install I am
geeting the following error.
Failed to execute goal on project graylog2-bootstrap: Could not resolve
dependencies for project
org.graylog2:graylog2-bootstrap:jar:1.2.0-SNAPSHOT: Failed to collect
dependencies at org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT -
org.kie:kie-api:jar:6.2.0.Final: Failed to read artifact descriptor for
org.kie:kie-api:jar:6.2.0.Final: Could not transfer artifact
org.jboss.dashboard-builder:dashboard-builder-bom:pom:6.2.0.Final from/to
jboss-public-repository-group (
https://repository.jboss.org/nexus/content/groups/public/):
java.lang.RuntimeException: Could not generate DH keypair: Prime size must
be multiple of 64, and can only range from 512 to 1024 (inclusive) - [Help
1]
Not able to figure out how to resolve this.
Do you have any ideas.
Thanks in Advance. : -)
On Thursday, 6 August 2015 13:13:16 UTC+5:30, Jochen Schalanda wrote:
Hi Gangadhar,
Graylog is using Maven as its build system, so using M2Eclipse (
https://eclipse.org/m2e/) it should be pretty easy to import the
project into Eclipse. FWIW, it's working out of the box with IntelliJ IDEA (
https://www.jetbrains.com/idea/).
Cheers,
Jochen
On Wednesday, 5 August 2015 23:51:34 UTC+2, g4gr...@gmail.com wrote:
Hi
I'm new to Graylog and would like to setup the project in eclipse to
learn more about.
Is there any link/documentation where i can setup locally?
Thanks
-Gangadhar
--
You received this message because you are subscribed to the Google Groups
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an
email to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/246010bb-9d99-451b-ad6e-224e82dab7ac%40googlegroups.com
https://groups.google.com/d/msgid/graylog2/246010bb-9d99-451b-ad6e-224e82dab7ac%40googlegroups.com?utm_medium=emailutm_source=footer
.
For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups
Graylog Users group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/CAN3pTV4%3DgWUZ0rgfDwJsgJ2moe3f6iroaEM9d1EinfOZ%3DayTkA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
[INFO] Scanning for projects...
[WARNING]
[WARNING] Some problems were encountered while building the effective model for
org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT
[WARNING] 'dependencyManagement.dependencies.dependency.systemPath' for
org.kie:kie-api:jar should not point at files within the project directory,
${basedir}/src/lib/kie-api-6.2.0.Final.jar will be unresolvable by dependent
projects @ org.graylog2:graylog2-parent:1.2.0-SNAPSHOT,
D:\Anant\GrayLog\graylog2-server-master\pom.xml, line 239, column 29
[WARNING]
[WARNING] Some problems were encountered while building the effective model for
org.graylog2:graylog2-shared:jar:1.2.0-SNAPSHOT
[WARNING] 'dependencyManagement.dependencies.dependency.systemPath' for
org.kie:kie-api:jar should not point at files within the project directory,
${basedir}/src/lib/kie-api-6.2.0.Final.jar will be unresolvable by dependent
projects @ org.graylog2:graylog2-parent:1.2.0-SNAPSHOT,
D:\Anant\GrayLog\graylog2-server-master\pom.xml, line 239, column 29
[graylog2] Re: Graylog On Apache
Hi Drew, Thanks for the response, it was really helpful. Can you please tell me, how does *Graylog web interface* communicates with* Graylog server* component. I couldn't find any docs for the same. I need this to better understanding of these component. Thanks in advance. Anant :-) On Wednesday, 26 August 2015 08:23:34 UTC+5:30, Drew Miranda wrote: Apache is a web server so you wouldn't install graylog on it. You can set it up on a server that apache is running on, although I don't recommend it. What you may want is log collection. It is a piece of software to read the apache logs in real time and forward to graylog. Check out the documentation pages in the graylog collector section. -- You received this message because you are subscribed to the Google Groups Graylog Users group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f590b425-1c4a-4b5d-a0b6-f7df97f6bf2e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [graylog2] Re: How to setup Graylog code on eclipse.
Hi Jochen, First of all Thanks for the prompt reply. Regarding the error mentioned by me, it is now resolved. All I did was changed[increased] the await time for transportReceivesDataExactlyRecvBufferSize() from the graylog2-inputs project which throw the error I was getting and so far my compilation is moving ahead. Thanks :-) Anant On Tuesday, 25 August 2015 13:35:35 UTC+5:30, Jochen Schalanda wrote: Hi Anant, the build process is working in our development and CI environments (which consist of Linux and Mac OS X machines). Maybe the version of Maven you're using is too old or there's some intercepting proxy between your computer and the Internet which messes things up. Regarding the test failure, that might be a problem or bug on Windows. We don't explicitly test (or advertise the use of) Graylog on Windows, but pull requests fixing those incompatibilities are certainly welcome. Cheers, Jochen On Tuesday, 25 August 2015 09:04:53 UTC+2, Anant Sawant wrote: HI Jochen, Well I have moved to java 8 now. Thanks for the advice. But the error still persist. Just for details I am trying to build[clean install] graylog on windows 7 machine using eclipse luna. I have attached the log and also the reports generated for the same. Following is the error I am getting Failed to execute goal on project graylog2-bootstrap: Could not resolve dependencies for project org.graylog2:graylog2- bootstrap:jar:1.2.0-SNAPSHOT: Failed to collect dependencies at org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT - org.kie:kie-api:jar:6.2.0.Final: Failed to read artifact descriptor for org.kie:kie-api:jar:6.2.0.Final: Could not transfer artifact org.jboss.dashboard-builder:dashboard-builder-bom:pom:6.2.0.Final from/to jboss-public-repository-group ( https://repository.jboss.org/nexus/content/groups/public/): java.lang.RuntimeException: Could not generate DH keypair: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive) - [Help 1] Any Ideas on the same. Please find the attachments. Thanks in Advance. Anant. On Mon, Aug 24, 2015 at 1:49 PM, Jochen Schalanda wrote: Hi Anant, your version of Java is too old. Please upgrade to a recent version of Java 8 (as Java 7 has reached EOL). Cheers, Jochen On Monday, 24 August 2015 10:10:51 UTC+2, Anant Sawant wrote: Hi Ganagadhar, I a new to Graylog and was on the same page, but did imported the project into eclipse. Now when I am trying to build the project using clean install I am geeting the following error. Failed to execute goal on project graylog2-bootstrap: Could not resolve dependencies for project org.graylog2:graylog2-bootstrap:jar:1.2.0-SNAPSHOT: Failed to collect dependencies at org.graylog2:graylog2-plugin:jar:1.2.0-SNAPSHOT - org.kie:kie-api:jar:6.2.0.Final: Failed to read artifact descriptor for org.kie:kie-api:jar:6.2.0.Final: Could not transfer artifact org.jboss.dashboard-builder:dashboard-builder-bom:pom:6.2.0.Final from/to jboss-public-repository-group ( https://repository.jboss.org/nexus/content/groups/public/): java.lang.RuntimeException: Could not generate DH keypair: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive) - [Help 1] Not able to figure out how to resolve this. Do you have any ideas. Thanks in Advance. : -) -- You received this message because you are subscribed to the Google Groups Graylog Users group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/918c4774-e99a-47b0-a928-835e67e2f24b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Graylog Web Inteface Issue
Hi, I am trying to compile graylog2-web-interface-1.1.6 on windows 7 using java 8 and tysafe activator 1.3.5. After Typesafe is done with compilation when I hit "Run" from the menu Tyasafe gives the following. Setting up Play fork run ... (use Ctrl+D to cancel) Multiple resolvers having different access mechanism configured with same name 'typesafe-releases'. To avoid conflict, Remove duplicate project resolvers (`resolvers`) or rename publishing resolver (`publishTo`). --- (Running the application, auto-reloading is enabled) --- play - Listening for HTTP on /0:0:0:0:0:0:0:0:9000 (Server started, use Ctrl+D to stop and go back to the console...) And creates "http://localhost:9000; under "Run on build". When I hit "http://localhost:9000; I am getting the following error. Cannot run program "git": CreateProcess error=2, The system cannot find the file specified java.io.IOException: Cannot run program "git": CreateProcess error=2, The system cannot find the file specified. Please give an idea to overcome this issue. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/08d5cf83-47c9-484e-8fd7-605258c2597a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Unable to get the graylog web interface login page.
Hi Jochen,
I have not made any change to the code, simply compiled it using typesafe
activator and the made a jar from the compiled code.
I also compared my jar(graylog-web-interface.graylog-web-interface-1.1.6)
with the official jar(graylog-web-interface.graylog-web-interface-1.1.6)
and my jar was missing the routes file so I copied the official routes file
into my custom compiled code and the bundled it to make a jar. Can this be
the reason for the issue.??? Can you please suggest me what could be the
possible reason for this issue, so that I can go ahead to solve this. As
off now I have no idea where to look for the cause of this error
On Monday, 14 September 2015 18:09:34 UTC+5:30, Jochen Schalanda wrote:
>
> Hi Anant,
>
> I can't reproduce your problem with the official Graylog 1.1.6 web
> interface, so I guess it's because of some changes you've made to the code
> of your custom compiled version.
>
>
> Cheers,
> Jochen
>
> On Monday, 14 September 2015 14:10:29 UTC+2, Anant Sawant wrote:
>>
>> Hi,
>>
>> I am running Graylog 1.1.6 server component and Graylog web component
>> 1.1.6 which I have compiled.
>> I am running this on ubuntu 14.04.1. For this I have installed
>> Elasticsearch 1.7.1, mongodb version v3.0.6 and Java 1.8.0_60. The Graylog
>> 1.1.6 server component, Graylog web component 1.1.6, Mongod and
>> Elasticsearch are on the same machine. For configuration I have referred
>> http://docs.graylog.org/en/1.2/pages/installation/manual_setup.html#configuring-the-web-interface.
>>
>> As per this document Graylog 1.1.6 server component and Graylog web
>> component 1.1.6 both are running well/as expected as I can see the expected
>> result on the console, also the logs shows no errors. Following are the
>> logs that I got on the console for server and web component respectively.
>>
>> ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo service elasticsearch status
>> * elasticsearch is running
>> ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo service mongod status
>> mongod start/running, process 758
>> ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo java -jar graylog.jar server
>> 2015-09-14 15:29:32,036 INFO : org.graylog2.bootstrap.CmdLineTool -
>> Loaded plugins: [Anonymous Usage Statistics 1.1.1
>> [org.graylog.plugins.usagestatistics.UsageStatsPlugin]]
>> 2015-09-14 15:29:32,325 INFO : org.graylog2.bootstrap.CmdLineTool -
>> Running with JVM arguments:
>> 2015-09-14 15:29:35,643 INFO :
>> org.graylog2.shared.system.stats.SigarService - Failed to load SIGAR.
>> Falling back to JMX implementations.
>> 2015-09-14 15:29:43,437 INFO :
>> org.graylog2.shared.buffers.InputBufferImpl - Message journal is enabled.
>> 2015-09-14 15:29:45,351 INFO : kafka.log.LogManager - Found clean
>> shutdown file. Skipping recovery for all logs in data directory
>> '/opt/graylog-server-1.1.6/data/journal'
>> 2015-09-14 15:29:45,357 INFO : kafka.log.LogManager - Loading log
>> 'messagejournal-0'
>> 2015-09-14 15:29:45,760 INFO : org.graylog2.shared.journal.KafkaJournal -
>> Initialized Kafka based journal at data/journal
>> 2015-09-14 15:29:45,869 INFO :
>> org.graylog2.shared.buffers.InputBufferImpl - Initialized InputBufferImpl
>> with ring size <65536> and wait strategy , running 2
>> parallel message handlers.
>> 2015-09-14 15:29:47,182 INFO : org.graylog2.plugin.system.NodeId - Node
>> ID: 996299ed-68ea-4a64-a1e6-74f6cb5cefc9
>> 2015-09-14 15:29:48,193 INFO : org.elasticsearch.node - [graylog2-server]
>> version[1.6.2], pid[1629], build[6220391/2015-07-29T09:24:47Z]
>> 2015-09-14 15:29:48,194 INFO : org.elasticsearch.node - [graylog2-server]
>> initializing ...
>> 2015-09-14 15:29:48,668 INFO : org.elasticsearch.plugins -
>> [graylog2-server] loaded [graylog2-monitor], sites []
>> 2015-09-14 15:29:57,310 INFO : org.elasticsearch.node - [graylog2-server]
>> initialized
>> 2015-09-14 15:29:57,331 INFO : org.graylog2.shared.buffers.ProcessBuffer
>> - Initialized ProcessBuffer with ring size <65536> and wait strategy
>> .
>> 2015-09-14 15:30:04,824 INFO :
>> org.graylog2.bindings.providers.RulesEngineProvider - No static rules file
>> loaded.
>> 2015-09-14 15:30:05,033 INFO : org.graylog2.buffers.OutputBuffer -
>> Initialized OutputBuffer with ring size <65536> and wait strategy
>> .
>> 2015-09-14 15:30:06,414 INFO :
>> org.hibernate.validator.internal.util.Version - HV01: Hibernate
>> Validator 5.1.3.Final
>> 2015-09-14 15:30:08,527 INFO : org.graylog2.bootstrap.ServerBootstrap -
>> Graylog server 1.1.6 (${git.comm
[graylog2] Unable to get the graylog web interface login page.
Hi,
I am running Graylog 1.1.6 server component and Graylog web component 1.1.6
which I have compiled.
I am running this on ubuntu 14.04.1. For this I have installed
Elasticsearch 1.7.1, mongodb version v3.0.6 and Java 1.8.0_60. The Graylog
1.1.6 server component, Graylog web component 1.1.6, Mongod and
Elasticsearch are on the same machine. For configuration I have referred
http://docs.graylog.org/en/1.2/pages/installation/manual_setup.html#configuring-the-web-interface.
As per this document Graylog 1.1.6 server component and Graylog web
component 1.1.6 both are running well/as expected as I can see the expected
result on the console, also the logs shows no errors. Following are the
logs that I got on the console for server and web component respectively.
ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo service elasticsearch status
* elasticsearch is running
ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo service mongod status
mongod start/running, process 758
ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo java -jar graylog.jar server
2015-09-14 15:29:32,036 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded
plugins: [Anonymous Usage Statistics 1.1.1
[org.graylog.plugins.usagestatistics.UsageStatsPlugin]]
2015-09-14 15:29:32,325 INFO : org.graylog2.bootstrap.CmdLineTool - Running
with JVM arguments:
2015-09-14 15:29:35,643 INFO :
org.graylog2.shared.system.stats.SigarService - Failed to load SIGAR.
Falling back to JMX implementations.
2015-09-14 15:29:43,437 INFO : org.graylog2.shared.buffers.InputBufferImpl
- Message journal is enabled.
2015-09-14 15:29:45,351 INFO : kafka.log.LogManager - Found clean shutdown
file. Skipping recovery for all logs in data directory
'/opt/graylog-server-1.1.6/data/journal'
2015-09-14 15:29:45,357 INFO : kafka.log.LogManager - Loading log
'messagejournal-0'
2015-09-14 15:29:45,760 INFO : org.graylog2.shared.journal.KafkaJournal -
Initialized Kafka based journal at data/journal
2015-09-14 15:29:45,869 INFO : org.graylog2.shared.buffers.InputBufferImpl
- Initialized InputBufferImpl with ring size <65536> and wait strategy
, running 2 parallel message handlers.
2015-09-14 15:29:47,182 INFO : org.graylog2.plugin.system.NodeId - Node ID:
996299ed-68ea-4a64-a1e6-74f6cb5cefc9
2015-09-14 15:29:48,193 INFO : org.elasticsearch.node - [graylog2-server]
version[1.6.2], pid[1629], build[6220391/2015-07-29T09:24:47Z]
2015-09-14 15:29:48,194 INFO : org.elasticsearch.node - [graylog2-server]
initializing ...
2015-09-14 15:29:48,668 INFO : org.elasticsearch.plugins -
[graylog2-server] loaded [graylog2-monitor], sites []
2015-09-14 15:29:57,310 INFO : org.elasticsearch.node - [graylog2-server]
initialized
2015-09-14 15:29:57,331 INFO : org.graylog2.shared.buffers.ProcessBuffer -
Initialized ProcessBuffer with ring size <65536> and wait strategy
.
2015-09-14 15:30:04,824 INFO :
org.graylog2.bindings.providers.RulesEngineProvider - No static rules file
loaded.
2015-09-14 15:30:05,033 INFO : org.graylog2.buffers.OutputBuffer -
Initialized OutputBuffer with ring size <65536> and wait strategy
.
2015-09-14 15:30:06,414 INFO :
org.hibernate.validator.internal.util.Version - HV01: Hibernate
Validator 5.1.3.Final
2015-09-14 15:30:08,527 INFO : org.graylog2.bootstrap.ServerBootstrap -
Graylog server 1.1.6 (${git.commit.id.abbrev}) starting up. (JRE: Oracle
Corporation 1.8.0_60 on Linux 3.13.0-32-generic)
2015-09-14 15:30:08,745 INFO :
org.graylog2.shared.initializers.PeriodicalsService - Starting 21
periodicals ...
2015-09-14 15:30:08,752 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.ThroughputCounterManagerThread]
periodical in [0s], polling every [1s].
2015-09-14 15:30:08,762 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s],
polling every [1s].
2015-09-14 15:30:08,768 INFO : org.elasticsearch.node - [graylog2-server]
starting ...
2015-09-14 15:30:08,790 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.AlertScannerThread] periodical in [10s],
polling every [60s].
2015-09-14 15:30:08,808 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread]
periodical in [0s], polling every [1s].
2015-09-14 15:30:08,812 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in
[0s], polling every [20s].
2015-09-14 15:30:08,813 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical,
running forever.
2015-09-14 15:30:08,848 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.DeadLetterThread] periodical, running
forever.
2015-09-14 15:30:08,857 INFO : org.graylog2.periodical.Periodicals -
Starting [org.graylog2.periodical.GarbageCollectionWarningThread]
periodical, running forever.
2015-09-14 15:30:08,873 INFO :
[graylog2] Re: Unable to get the graylog web interface login page.
Hi Jochen,
I have not made any change to the code, simply compiled it using typesafe
activator and the made a jar from the compiled code.
I also compared my jar(graylog-web-interface.graylog-web-interface-1.1.6)
with the official jar(graylog-web-interface.graylog-web-interface-1.1.6)
and my jar was missing the routes file so I copied the official routes file
into my custom compiled code and the bundled it to make a jar. Can this be
the reason for the issue.??? Can you please suggest me what could be the
possible reason for this issue, so that I can go ahead to solve this. As
off now I have no idea where to look for the cause of this error
On Monday, 14 September 2015 18:09:34 UTC+5:30, Jochen Schalanda wrote:
>
> Hi Anant,
>
> I can't reproduce your problem with the official Graylog 1.1.6 web
> interface, so I guess it's because of some changes you've made to the code
> of your custom compiled version.
>
>
> Cheers,
> Jochen
>
> On Monday, 14 September 2015 14:10:29 UTC+2, Anant Sawant wrote:
>>
>> Hi,
>>
>> I am running Graylog 1.1.6 server component and Graylog web component
>> 1.1.6 which I have compiled.
>> I am running this on ubuntu 14.04.1. For this I have installed
>> Elasticsearch 1.7.1, mongodb version v3.0.6 and Java 1.8.0_60. The Graylog
>> 1.1.6 server component, Graylog web component 1.1.6, Mongod and
>> Elasticsearch are on the same machine. For configuration I have referred
>> http://docs.graylog.org/en/1.2/pages/installation/manual_setup.html#configuring-the-web-interface.
>>
>> As per this document Graylog 1.1.6 server component and Graylog web
>> component 1.1.6 both are running well/as expected as I can see the expected
>> result on the console, also the logs shows no errors. Following are the
>> logs that I got on the console for server and web component respectively.
>>
>> ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo service elasticsearch status
>> * elasticsearch is running
>> ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo service mongod status
>> mongod start/running, process 758
>> ubuntu@ubuntu:/opt/graylog-server-1.1.6$ sudo java -jar graylog.jar server
>> 2015-09-14 15:29:32,036 INFO : org.graylog2.bootstrap.CmdLineTool -
>> Loaded plugins: [Anonymous Usage Statistics 1.1.1
>> [org.graylog.plugins.usagestatistics.UsageStatsPlugin]]
>> 2015-09-14 15:29:32,325 INFO : org.graylog2.bootstrap.CmdLineTool -
>> Running with JVM arguments:
>> 2015-09-14 15:29:35,643 INFO :
>> org.graylog2.shared.system.stats.SigarService - Failed to load SIGAR.
>> Falling back to JMX implementations.
>> 2015-09-14 15:29:43,437 INFO :
>> org.graylog2.shared.buffers.InputBufferImpl - Message journal is enabled.
>> 2015-09-14 15:29:45,351 INFO : kafka.log.LogManager - Found clean
>> shutdown file. Skipping recovery for all logs in data directory
>> '/opt/graylog-server-1.1.6/data/journal'
>> 2015-09-14 15:29:45,357 INFO : kafka.log.LogManager - Loading log
>> 'messagejournal-0'
>> 2015-09-14 15:29:45,760 INFO : org.graylog2.shared.journal.KafkaJournal -
>> Initialized Kafka based journal at data/journal
>> 2015-09-14 15:29:45,869 INFO :
>> org.graylog2.shared.buffers.InputBufferImpl - Initialized InputBufferImpl
>> with ring size <65536> and wait strategy , running 2
>> parallel message handlers.
>> 2015-09-14 15:29:47,182 INFO : org.graylog2.plugin.system.NodeId - Node
>> ID: 996299ed-68ea-4a64-a1e6-74f6cb5cefc9
>> 2015-09-14 15:29:48,193 INFO : org.elasticsearch.node - [graylog2-server]
>> version[1.6.2], pid[1629], build[6220391/2015-07-29T09:24:47Z]
>> 2015-09-14 15:29:48,194 INFO : org.elasticsearch.node - [graylog2-server]
>> initializing ...
>> 2015-09-14 15:29:48,668 INFO : org.elasticsearch.plugins -
>> [graylog2-server] loaded [graylog2-monitor], sites []
>> 2015-09-14 15:29:57,310 INFO : org.elasticsearch.node - [graylog2-server]
>> initialized
>> 2015-09-14 15:29:57,331 INFO : org.graylog2.shared.buffers.ProcessBuffer
>> - Initialized ProcessBuffer with ring size <65536> and wait strategy
>> .
>> 2015-09-14 15:30:04,824 INFO :
>> org.graylog2.bindings.providers.RulesEngineProvider - No static rules file
>> loaded.
>> 2015-09-14 15:30:05,033 INFO : org.graylog2.buffers.OutputBuffer -
>> Initialized OutputBuffer with ring size <65536> and wait strategy
>> .
>> 2015-09-14 15:30:06,414 INFO :
>> org.hibernate.validator.internal.util.Version - HV01: Hibernate
>> Validator 5.1.3.Final
>> 2015-09-14 15:30:08,527 INFO : org.graylog2.bootstrap.ServerBootstrap -
>> Graylog server 1.1.6 (${git.comm
Re: [graylog2] Graylog shows no menu after login
Hi Edmundo, Thanks!! The cause of this issue was the "app.js" file which graylog was no able to load. I fixed it and now the graylog is working fine. Though it is working fine, when I start the Graylog server component I get the following lines on console "Failed to load sigar falling back to jmx implementation". Is this something I should be worried about as with this still everything works fine. Can you please suggest me something on this. As I have no idea about this. Thanks in advance!! Anant :-) On Wednesday, 16 September 2015 23:23:55 UTC+5:30, Edmundo Alvarez wrote: > > Hi Anant, > > By the way you described the problem, there must be some error loading > Javascript. Could you please take a look at the Javascript console in your > browser and share any errors that you might see there? It would also be > helpful knowing the browser and OS you use. Please also ensure that you are > not using any plugin blocking Javascript execution for Graylog. > > Regards, > > Edmundo > > > On 16 Sep 2015, at 18:58, Anant Sawant <sawant...@gmail.com > > wrote: > > > > Hi! > > > > I am running Graylog 1.1.6 server component and Graylog web component > 1.1.6 which I have setup manually. > > I am running this on ubuntu 14.04.1. For this I have installed > Elasticsearch 1.7.2, mongodb version v3.0.6 and Java 1.8.0_60. The Graylog > 1.1.6 server component, Graylog web component 1.1.6, Mongod and > Elasticsearch are on the same machine. For configuration I have referred > http://docs.graylog.org/en/1.2/pages/installation/manual_setup.html#configuring-the-web-interface. > > As per this document Graylog 1.1.6 server component and Graylog web > component 1.1.6 both are running well/as expected as I can see the expected > result on the console, also the logs shows no errors/exception. It also > shows the graylog login screen, but when I login using the credentials I > see no menu's, all I get is a simple page saying "graylog-web-interface > v1.1.6 (2e264c2) (Oracle Corporation 1.8.0_60 / Linux 3.13.0-32-generic) on > ubuntu ". Why are the menus not visible?? > > Is it because as I have not pointed the configured elasticsearch to > syslog or any other log system. Or is the issue with the configuration?? > > I have attached the configuration files. > > > > Please suggest or give me a idea to where to look for this issue. > > > > Thanks in advance > > > > Anant:-) > > > > -- > > You received this message because you are subscribed to the Google > Groups "Graylog Users" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to graylog2+u...@googlegroups.com . > > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/6683ee44-dda1-4869-b72e-d43471f8d81e%40googlegroups.com. > > > > For more options, visit https://groups.google.com/d/optout. > > > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ae5d6b2f-6a5d-467b-adf8-bba225b17509%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Graylog SSl configuration query.
Hi!! We have done the manual setup of Graylog web and Graylog server component on Ubuntu 14.04.4. From the document provided at "http://docs.graylog.org; we are unable to find setting up SSl for Graylog. I am running Graylog 1.1.6. Kindly provide/guide us with steps to configure SSL. Thanks in Advance!! Anant :-) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0e4b2616-2271-4b11-8f91-5818592cb62e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Graylog SSl configuration query.
Hi!! I followed the following document " https://media.readthedocs.org/pdf/graylog2-docs/1.0/graylog2-docs.pdf; to perform SSL for Graylog 1.1.6 and it worked fine. Cheers!! Anant :-) On Monday, 21 September 2015 20:23:13 UTC+5:30, Anant Sawant wrote: > > Hi!! > > We have done the manual setup of Graylog web and Graylog server component > on Ubuntu 14.04.4. From the document provided at "http://docs.graylog.org; > we are unable to find setting up SSl for Graylog. I am running Graylog > 1.1.6. Kindly provide/guide us with steps to configure SSL. > > Thanks in Advance!! > > Anant :-) > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/cb7c5bf5-caf3-4dd4-be41-53dcd642e9bc%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Change permission for user
Hi!! If you are running your own compiled source code for Graylog and not the ready to run Graylog package you can simply hide this menu for end user. Just disable the System menu from app.js file located in the "graylog-web-interface.graylog-web-interface-1.1.6-assets" jar. Or under source code. Cheers, Anant. On Thursday, 26 November 2015 09:34:36 UTC+5:30, Hitsu Yaga wrote: > > Dear all, > I am also facing with this problem now. I don't want customer see anything > about our node, systemHow can I do that? please advise!!! > > On Wednesday, November 25, 2015 at 11:15:02 PM UTC+7, Tiểu Yết wrote: >> >> Hi everyone, >> We just setup graylog server for our customers can access their logs. Now >> we can do it with stream that seperate log with specific field. But when >> our customer login web-interface they can access something about our system >> as attached file. We only want they only access stream and dashboard. It's >> possible? >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/4bf0cf38-41da-4458-b9fa-2a770ee85927%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Change permission for user
HI!!
Try replacing this peace of code
this.state.permissions.SOURCES_READ?t.createElement(l,{title:this._systemTitle(),active:this._isActive("/system")},this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.SystemController.index(0).url},"Overview"),this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.NodesController.nodes().url},"Nodes"),this.state.permissions.SOURCES_READ&_isPermitted(["INPUTS_READ"])&(u,{href:jsRoutes.controllers.InputsController.index().url},"Inputs"),this._isPermitted(["OUTPUTS_READ"])&(u,{href:jsRoutes.controllers.OutputsController.index().url},"Outputs"),this._isPermitted(["COLLECTORS_READ"])&(u,{href:jsRoutes.controllers.CollectorsController.index().url},"Collectors"),this._isPermitted(["INDICES_READ"])&(u,{href:jsRoutes.controllers.IndicesController.index().url},"Indices"),this._isPermitted(["LOGGERS_READ"])&(u,{href:jsRoutes.controllers.LoggingController.index().url},"Logging"),this._isPermitted(["USERS_EDIT"])&(u,{href:jsRoutes.controllers.UsersController.index().url},"Users"),this._isPermitted(["DASHBOARDS_CREATE","INPUTS_CREATE","STREAMS_CREATE"])&(u,{href:jsRoutes.controllers.BundlesController.index().url},"Content
Packs"),this._isPermitted(["INPUTS_EDIT"])&(u,{href:jsRoutes.controllers.GrokPatternsController.index().url},"Grok
Patterns")):null)
with
this._isPermitted(["SEARCHES_ABSOLUTE","SEARCHES_RELATIVE","SEARCHES_KEYWORD"])&_READ?t.createElement(l,{title:this._systemTitle(),active:this._isActive("/system")},this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.SystemController.index(0).url},"Overview"),this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.NodesController.nodes().url},"Nodes"),this.state.permissions.SOURCES_READ&_isPermitted(["INPUTS_READ"])&(u,{href:jsRoutes.controllers.InputsController.index().url},"Inputs"),this._isPermitted(["OUTPUTS_READ"])&(u,{href:jsRoutes.controllers.OutputsController.index().url},"Outputs"),this._isPermitted(["COLLECTORS_READ"])&(u,{href:jsRoutes.controllers.CollectorsController.index().url},"Collectors"),this._isPermitted(["INDICES_READ"])&(u,{href:jsRoutes.controllers.IndicesController.index().url},"Indices"),this._isPermitted(["LOGGERS_READ"])&(u,{href:jsRoutes.controllers.LoggingController.index().url},"Logging"),this._isPermitted(["USERS_EDIT"])&(u,{href:jsRoutes.controllers.UsersController.index().url},"Users"),this._isPermitted(["DASHBOARDS_CREATE","INPUTS_CREATE","STREAMS_CREATE"])&(u,{href:jsRoutes.controllers.BundlesController.index().url},"Content
Packs"),this._isPermitted(["INPUTS_EDIT"])&(u,{href:jsRoutes.controllers.GrokPatternsController.index().url},"Grok
Patterns")):null)
Just find the condition which allows certain menu/feature for admin but not
to the end user and add it to the system menu code. For example End user
has no Search and source menu so find that condition and merge it with
system menu.
Cheers!!
Anant
On Saturday, 28 November 2015 07:25:55 UTC+5:30, Hitsu Yaga wrote:
>
> Dear Anant,
> Your code is look good. But when I modified app.js, it hidden system menu
> for all roles. I attached file app.js and result when I log in with admin
> role. Please help to check again
>
> On Friday, November 27, 2015 at 7:21:17 PM UTC+7, Anant Sawant wrote:
>>
>> Hi!!
>>
>> Disabling System menu for End User but keep for Admin User locate the
>> following code in app.js file
>>
>> r.createElement(l,{title:this._systemTitle(),active:this._isActive("/system")},this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.SystemController.index(0).url},"Overview"),this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.NodesController.nodes().url},"Nodes"),this.state.permissions.SOURCES_READ&_isPermitted(["INPUTS_READ"])&(u,{href:jsRoutes.controllers.InputsController.index().url},"Inputs"),this._isPermitted(["OUTPUTS_READ"])&(u,{href:jsRoutes.controllers.OutputsController.index().url},"Outputs"),this._isPermitted(["COLLECTORS_READ"])&(u,{href:jsRoutes.controllers.CollectorsController.index().url},"Collectors"),this._isPermitted(["INDICES_READ"])&(u,{href:jsRoutes.controllers.IndicesController.index().url},"Indices"),this._isPermitted(["LOGGERS_READ"])&(u,{href:js
[graylog2] Re: Change permission for user
HI!!
Try replacing this peace of code
this.state.permissions.
SOURCES_READ?t.createElement(l,{title:this._systemTitle(),active:this._isActive("/system")},this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.SystemController.index(0).url},"Overview"),this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.NodesController.nodes().url},"Nodes"),this.state.permissions.SOURCES_READ&_isPermitted(["INPUTS_READ"])&(u,{href:jsRoutes.controllers.InputsController.index().url},"Inputs"),this._isPermitted(["OUTPUTS_READ"])&(u,{href:jsRoutes.controllers.OutputsController.index().url},"Outputs"),this._isPermitted(["COLLECTORS_READ"])&(u,{href:jsRoutes.controllers.CollectorsController.index().url},"Collectors"),this._isPermitted(["INDICES_READ"])&(u,{href:jsRoutes.controllers.IndicesController.index().url},"Indices"),this._isPermitted(["LOGGERS_READ"])&(u,{href:jsRoutes.controllers.LoggingController.index().url},"Logging"),this._isPermitted(["USERS_EDIT"])&(u,{href:jsRoutes.controllers.UsersController.index().url},"Users"),this._isPermitted(["DASHBOARDS_CREATE","INPUTS_CREATE","STREAMS_CREATE"])&(u,{href:jsRoutes.controllers.BundlesController.index().url},"Content
Packs"),this._isPermitted(["INPUTS_EDIT"])&(u,{href:jsRoutes.controllers.GrokPatternsController.index().url},"Grok
Patterns")):null)
with
this._isPermitted(["SEARCHES_ABSOLUTE","SEARCHES_RELATIVE","SEARCHES_KEYWORD"])&_READ?t.createElement(l,{title:this._systemTitle(),active:this._isActive("/system")},this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.SystemController.index(0).url},"Overview"),this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.NodesController.nodes().url},"Nodes"),this.state.permissions.SOURCES_READ&_isPermitted(["INPUTS_READ"])&(u,{href:jsRoutes.controllers.InputsController.index().url},"Inputs"),this._isPermitted(["OUTPUTS_READ"])&(u,{href:jsRoutes.controllers.OutputsController.index().url},"Outputs"),this._isPermitted(["COLLECTORS_READ"])&(u,{href:jsRoutes.controllers.CollectorsController.index().url},"Collectors"),this._isPermitted(["INDICES_READ"])&(u,{href:jsRoutes.controllers.IndicesController.index().url},"Indices"),this._isPermitted(["LOGGERS_READ"])&(u,{href:jsRoutes.controllers.LoggingController.index().url},"Logging"),this._isPermitted(["USERS_EDIT"])&(u,{href:jsRoutes.controllers.UsersController.index().url},"Users"),this._isPermitted(["DASHBOARDS_CREATE","INPUTS_CREATE","STREAMS_CREATE"])&(u,{href:jsRoutes.controllers.BundlesController.index().url},"Content
Packs"),this._isPermitted(["INPUTS_EDIT"])&(u,{href:jsRoutes.controllers.GrokPatternsController.index().url},"Grok
Patterns")):null)
Just find the condition which allows certain menu/feature for admin but not
to the end user and add it to the system menu code. For example End user
has no Search and source menu so find that condition and merge it with
system menu.
Cheers!!
Anant
On Saturday, 28 November 2015 07:25:55 UTC+5:30, Scarlet Eza wrote:
>
> Dear Anant,
> Your code is look good. But when I modified app.js, it hidden system menu
> for all roles. I attached file app.js and result when I log in with admin
> role. Please help to check again
>
> On Friday, November 27, 2015 at 7:21:17 PM UTC+7, Anant Sawant wrote:
>>
>> Hi!!
>>
>> Disabling System menu for End User but keep for Admin User locate the
>> following code in app.js file
>>
>> r.createElement(l,{title:this._systemTitle(),active:this._isActive("/system")},this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.SystemController.index(0).url},"Overview"),this.state.permissions.SOURCES_READ&(u,{href:jsRoutes.controllers.NodesController.nodes().url},"Nodes"),this.state.permissions.SOURCES_READ&_isPermitted(["INPUTS_READ"])&(u,{href:jsRoutes.controllers.InputsController.index().url},"Inputs"),this._isPermitted(["OUTPUTS_READ"])&(u,{href:jsRoutes.controllers.OutputsController.index().url},"Outputs"),this._isPermitted(["COLLECTORS_READ"])&(u,{href:jsRoutes.controllers.CollectorsController.index().url},"Collectors"),this._isPermitted(["INDICES_READ"])&(u,{href:jsRoutes.controllers.IndicesController.index().url},"Indices"),this._isPermitted(["LOGGERS_READ"])&(u,{href:js
[graylog2] Updating to newer version of graylog
Dear All!! Greetings for the day. I am using Graylog 1.1.6, now with the latest 1.2.2 release of Graylog which really has some awesome features we are making our minds to go for the newer version but I have some queries as follows 1 :- I have made some changes in the source code of the existing version which we are using, will a upgrade to 1.2.2 over-write the changes made? 2 :- Also is there any changes in the compilation process for the Graylog 1.2.2 Server component and Graylog 1.2.2 web component, as for Graylog 1.1.6 the compilation can be done using eclipse for Server component and using Typesafe Activator for the Web component? Thanks in advance! Cheers, Anant -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/7caf3c07-0553-48ac-9a70-f27dabc9adec%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [graylog2] Exception in thread "elasticsearch[graylog2-server][generic][T#1]"
Hi Jan! Thanks for the reply. This is the first time this issue has occurred. Could you please tell me how can I check and increase heap size for graylog server, I searched but got nothing for graylog server about how to increase the heap size. On Thursday, 23 June 2016 15:10:41 UTC+5:30, Jan Doberstein wrote: > > Hej Anant, > > > On 23. Juni 2016 at 09:40:05, Anant Sawant (sawant...@gmail.com > ) wrote: > > Graylog server is throwing following error. Exception in thread > > > > Exception: java.lang.OutOfMemoryError thrown from the > > UncaughtExceptionHandler in thread > > "elasticsearch[graylog2-server][generic][T#10]" > > Exception in thread "eventbus-handler-8" Exception in thread > > "restapi-boss-0" Exception in thread "eventbus-handler-9" > > Exception: java.lang.OutOfMemoryError thrown from the > > UncaughtExceptionHandler in thread "eventbus-handler-8" > > > > Exception: java.lang.OutOfMemoryError thrown from the > > UncaughtExceptionHandler in thread "restapi-boss-0” > > > Does this happen from one day to the other? Did you check you Memory > usage and the Heap of the Graylog server? > > Would it be possible for you to Update to the latest 1.3.5 release or > Update to the most current 2.0.3 Version? > > > > Is the issue related to the Graylog server or elasticsearch?? > > > > Using Graylog 1.1.6 and elasticsearch 1.7.2 on CentOS release 6.7. > > This is related to Graylog - as you can see it gives and > out-of-memory-error > > with kind regards > Jan > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/d6891248-26c5-4057-b195-cb44cbc4fac7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Sending http mail alerts
Hi, Well I am working on graylog since last 6 months, basically the coding part. Now I have started working with the configuration part which requires installing plugins etc. Is it necesary to install postfix on the machine graylog is running in order to send mail alerts or it can be done without it? Thanks in advance!! Anant Sawant -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f179be8f-4037-48ea-b3a1-e0633b881fe2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Graylog Web Compilation
Hi All, I am pretty stuck on this issue, not able to compile the changes made using "TypeSafe Activator". Please point me somewhere to overcome this isssue. Thanks in Advance. Anant. On Thursday, 28 January 2016 20:32:00 UTC+5:30, Anant Sawant wrote: > > > Hi All, > > I have been using typesafe activator version 1.3.5 to compile Graylog Web > Component. But it is not working efficiently, sometime it compiles the file > and sometime it do not. > Form today I am facing this issue. Also can anyone please point me to any > other tool or method to compile Graylog web component. > > Thanks in advance!! > Anant > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/59be2ca9-ff8a-4d32-8d84-74a6ef5d3591%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Graylog Web Compilation
Hi All, I have been using typesafe activator version 1.3.5 to compile Graylog Web Component. But it is not working efficiently, sometime it compiles the file and sometime it do not. Form today I am facing this issue. Also can anyone please point me to any other tool or method to compile Graylog web component. Thanks in advance!! Anant -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/af789a95-d220-4ac0-b0c7-6f711fd4be77%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Sending http mail alerts
Thank You Jochen. On Thursday, 11 February 2016 19:38:51 UTC+5:30, Jochen Schalanda wrote: > > Hi Anant, > > the email alert callback can use any SMTP server accessible from the > system running Graylog. You don't need to install a local MTA like Postfix > or Exim to use it. > > > Cheers, > Jochen > > On Thursday, 11 February 2016 14:37:57 UTC+1, Anant Sawant wrote: >> >> >> Hi, >> >> Well I am working on graylog since last 6 months, basically the coding >> part. Now I have started working with the configuration part which requires >> installing plugins etc. >> Is it necesary to install postfix on the machine graylog is running in >> order to send mail alerts or it can be done without it? >> >> Thanks in advance!! >> Anant Sawant >> >> >> >> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/836d3af7-b8ca-4f6b-8b0e-4a8c226deba6%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Content Pack Query
Well I just went through the content pack, what I find intriguing was the following field in the content pack json "bind_address" : "172.16.0.191", do I need to change the IP address to the IP address of the machine on which I have newly setup graylog. On Wednesday, 30 March 2016 17:52:01 UTC+5:30, Anant Sawant wrote: > > Hi all!! > > > I have installed 1.1.6 version of graylog and have been using it since > more than six months. For some reasons I have installed the same version on > another machine(new setup), but I want to create the same streams and > dashboards. So I created the content pack from the old set up and imported > it to the new one, but I am not getting the Dashboards and streams in the > new one. The new one is completely blank as I have not created any Inputs > on it. What do I need to do to get the content packs working. > > > Thanks In Advance!! > Anant. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/94c9e6f1-fb86-425c-92d8-6ed2cf36759a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Amazon AWS CloudTrail plugin - error
Hi Jochen!!,
The AWS plugin is not reading any logs, though it is reaching to the AWS
cloudtrail successfully. I am sharing the payload sample and the
configuration I have done in both Graylog and AWS. Please tell me if any
thing wrong I have done doing it.
this is one of the value that mesage.body() from
"CloudtrailSNSNotificationParser" is returing :-
{"s3Bucket":"fluidcmlogs","s3ObjectKey":["fluidcm/AWSLogs/924399563845/CloudTrail/us-west-1/2016/05/11/924399563845_CloudTrail_us-west-1_20160511T0715Z_FCFmYjMFmTZFthnu.json.gz"]}
this exists at the AWS.
Following is the content which I got after manually extracting the above
mentioned
924399563845_CloudTrail_us-west-1_20160511T0715Z_FCFmYjMFmTZFthnu.json.gz
:-
{"Records":[{"eventVersion":"1.03","userIdentity":{"type":"IAMUser","principalId":"AIDAIZDWJD4XSD7OPQYUW",
"arn":"arn:aws:iam::924399563845:user/nileshk","accountId":"924399563845","userName":"nileshk",
"sessionContext":{"attributes":{"mfaAuthenticated":"false","creationDate":"2016-05-11T07:11:24Z"}},
"invokedBy":"signin.amazonaws.com"},"eventTime":"2016-05-11T07:12:45Z","eventSource":"s3.amazonaws.com",
"eventName":"GetBucketVersioning","awsRegion":"us-west-1","sourceIPAddress":"14.140.226.238",
"userAgent":"signin.amazonaws.com","requestParameters":{"bucketName":"fluidcmlogs"},
"responseElements":null,"requestID":"66745CC932793217","eventID":"08f194cd-52c8-41eb-9619-beee1af30074",
"eventType":"AwsApiCall","recipientAccountId":"924399563845"},{"eventVersion":"1.03",
"userIdentity":{"type":"IAMUser","principalId":"AIDAIZDWJD4XSD7OPQYUW","arn":"arn:aws:iam::924399563845:user/nileshk",
"accountId":"924399563845","userName":"nileshk","sessionContext":{"attributes":{"mfaAuthenticated":"false",
"creationDate":"2016-05-11T07:11:24Z"}},"invokedBy":"signin.amazonaws.com"},"eventTime":"2016-05-11T07:12:46Z",
"eventSource":"s3.amazonaws.com","eventName":"GetBucketVersioning","awsRegion":"us-west-1","sourceIPAddress":"14.140.226.238",
"userAgent":"signin.amazonaws.com","requestParameters":{"bucketName":"fluidcmlogs"},"responseElements":null,"requestID":"E1360FC36112F5A8",
"eventID":"cab707ed-f20b-40ea-ac3f-6e208fc6eb4a","eventType":"AwsApiCall","recipientAccountId":"924399563845"}]}
Setting/configuration at the AWS account(for doing this followed the following
"https://marketplace.graylog.org/addons/3f132fab-50f0-4c88-b63d-9ac99aa6c20e;).
Step 1: Enabling CloudTrail for an AWS region
Trail name:Fluidcm-CloudTrail
S3 bucket: fluidcmlogs
Log file prefix: fluidcm
SNS notification for every log file delivery: Yes
SNS topic:cloudtrail-log-write
Step 2: Set up SQS for CloudTrail write notifications
Queue Name: fluidcm-notifications
Kept Default setting as it is..
Step 3: Created Aws Policy for s3 bucket and SQS for full access user.
The region where your new queue will be created:US West (N. California)
Seetin/configuration at Graylog.
Title :- Aws CloudTrail
AWS Region :- US_WEST_1
AWS access key :- auto generated
SQS queue name :- fluidcm-notifications
AWS secret key :- auto generated
On Wednesday, 11 May 2016 11:32:07 UTC+5:30, Anant Sawant wrote:
>
> HI Jochen!!
>
> Thanks for the reply. The error has been resolved. The plugin is able to
> connect to AWS and also get the message body as per the
> "CloudtrailSNSNotificationParser" class from the plugin but no logs are
> visible in Graylog. I inserted my own logs to see if the plugin is reading
> events from AWS or not, and found that it receiving the message's body,
> "message.getBody()" methid is returning the following
>
>
> {"s3Bucket":"fluidcmlogs","s3ObjectKey":["fluidcm/AWSLogs/924399563845/CloudTrail/us-west-1/2016/05/10/924399563845_CloudTrail_us-west-1_20160510T1220Z_Dd8u8fCREYcu0Bd8.json.gz"]}
>
> {"s3Bucket":"fluidcmlogs","s3ObjectKey":["fluidcm/AWSLogs/924399563845/CloudTrail/us-west-1/2016/05/10/924399563845_CloudTra
[graylog2] Re: Amazon AWS CloudTrail plugin - error
Hi Everyone!!,
The plugin is still not reading the
On Friday, 6 May 2016 16:32:38 UTC+5:30, Anant Sawant wrote:
>
> Hi Everyone!!,
>
> I went through the documentation for setting up the Cloudtrail plugin for
> US-WEST-1, but I am getting the following error.
> I have done all the AWS settings/configuration as described at "
> https://marketplace.graylog.org/addons/3f132fab-50f0-4c88-b63d-9ac99aa6c20e;,
> the only diffrence is I have set the Queue name to fluidcm-notifiaction
> insted of cloudtrail-notification.
>
>
> 2016-04-16 21:11:25,899 ERROR:
> com.graylog2.input.cloudtrail.CloudTrailSubscriber - Could not read
> messages from SNS. This is most likely a misconfiguration of the plugin.
> Going into sleep loop and retrying.
> java.lang.RuntimeException: Could not parse SNS notification: hi
> at
> com.graylog2.input.cloudtrail.notifications.CloudtrailSNSNotificationParser.parse(CloudtrailSNSNotificationParser.java:36)
> at
> com.graylog2.input.cloudtrail.notifications.CloudtrailSQSClient.getNotifications(CloudtrailSQSClient.java:48)
> at
> com.graylog2.input.cloudtrail.CloudTrailSubscriber.run(CloudTrailSubscriber.java:80)
> Caused by: com.fasterxml.jackson.core.JsonParseException: Unrecognized
> token 'hi': was expecting ('true', 'false' or 'null')
> at [Source: hi; line: 1, column: 5]
> at
> com.fasterxml.jackson.core.JsonParser._constructError(JsonParser.java:1487)
> at
> com.fasterxml.jackson.core.base.ParserMinimalBase._reportError(ParserMinimalBase.java:518)
> at
> com.fasterxml.jackson.core.json.ReaderBasedJsonParser._reportInvalidToken(ReaderBasedJsonParser.java:2299)
> at
> com.fasterxml.jackson.core.json.ReaderBasedJsonParser._handleOddValue(ReaderBasedJsonParser.java:1458)
> at
> com.fasterxml.jackson.core.json.ReaderBasedJsonParser.nextToken(ReaderBasedJsonParser.java:683)
> at
> com.fasterxml.jackson.databind.ObjectMapper._initForReading(ObjectMapper.java:3602)
> at
> com.fasterxml.jackson.databind.ObjectMapper._readMapAndClose(ObjectMapper.java:3547)
> at
> com.fasterxml.jackson.databind.ObjectMapper.readValue(ObjectMapper.java:2578)
> at
> com.graylog2.input.cloudtrail.notifications.CloudtrailSNSNotificationParser.parse(CloudtrailSNSNotificationParser.java:24)
> ... 2 more
>
> I'm not that knowledgeable about AWS, but I can't see how it's not
> working. It's dumping to the S3 bucket correctly within the AWS console. I
> have given full access to the user.
> Can anyone please tell me what wrong I have done?
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/aa952e0b-28d0-49a6-979e-84eca137c40f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[graylog2] Proffesional support query
Hi, I went through the Graylog professional support information at "https://www.graylog.org/professional-support; and have the following queries regarding the professional support provided for Graylog. Q1.Does the professional support include consultation, issue resolving in regards to Graylog's source code compilation? Q2 In "Development graylog-server nodes" what kind/level of development is supported e.g new custom functionality or branding etc?? If there is any documentation which can help me understand the professional support in details please provide here or you can also mail me at "ana...@leotechnosoft.net". Thanks in advance!! Anant Sawant -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/b1f8f6a6-46d5-4f10-9e60-c68115fe21ff%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Graylog compilation guideline
Hi, I am trying to compile Graylog 2.0.0 source code, I have previously compiled Graylog 1.1.6 successfully. For compiling 1.1.6 server component I used eclipse and for the web component I used "TypeSafe Activator", but I am not sure about how to compile the 2.0.0 version as both components are merged into single. I want to know what tools are required and how to setup the compilation environment for compiling 2.0.0. I have done an R and D on the same but have not found any documentation for the compilation. If any one knows please share the method here, it would be very helpful. Thanks in advance!! Anant. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/a6a7bdbc-b608-4cd2-bf2e-a528740d890d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Unble to get graylog webinterface
HI ,
Thanks for such a quick replay!!
I am already running the web interface on http://127.0.0.1:9000
<http://www.google.com/url?q=http%3A%2F%2F127.0.0.1%3A9000%2F=D=1=AFQjCNH_ul1nQQH15pwQIbCL9H9JBCrnww>
and I have not upgraded Graylog to this version I have installed a fresh
release in completely new environment(machine). What do you mean by "if you
tried to get the root resource of the Graylog REST API (this will change in
Graylog 2.1.0)." sory but I do not understand.
I went through the configuration again and compared it with your suggested
configurations "http://docs.graylog.org/en/2.0/pages/upgrade.html
<http://www.google.com/url?q=http%3A%2F%2Fdocs.graylog.org%2Fen%2F2.0%2Fpages%2Fupgrade.html=D=1=AFQjCNE1YuuinT_if2IzizQ81ejR_yw4NA>
and http://docs.graylog.org/en/2.0/pages/configuration/web_interface.html;
but did not found any different. Is there anything we need to change in the
conf files. How do we overcome this?? I am attaching the conf files.
Again Thanks in advance!!
Anant
On Friday, 15 July 2016 18:31:47 UTC+5:30, Jochen Schalanda wrote:
>
> Hi Anant,
>
> according to your logs, the Graylog REST API and the Graylog web interface
> have been successfully started:
>
> 2016-07-15 16:38:00,442 INFO :
>> org.graylog2.initializers.WebInterfaceService - Started Web Interface at <
>> http://127.0.0.1:9000/>
>> 2016-07-15 16:38:00,443 INFO :
>> org.graylog2.shared.initializers.RestApiService - Started REST API at <
>> http://127.0.0.1:12900/>
>
>
> The response you've mentioned ({"type":"ApiError","message":"HTTP 404 Not
> Found"}) is totally normal if you tried to get the root resource of the
> Graylog REST API (this will change in Graylog 2.1.0).
>
> Make sure to open http://127.0.0.1:9000/
> <http://www.google.com/url?q=http%3A%2F%2F127.0.0.1%3A9000%2F=D=1=AFQjCNH_ul1nQQH15pwQIbCL9H9JBCrnww>
> for
> accessing the Graylog web interface and not http://127.0.0.1:12900/,
> which is the Graylog REST API.
>
> Also make sure to read http://docs.graylog.org/en/2.0/pages/upgrade.html
> <http://www.google.com/url?q=http%3A%2F%2Fdocs.graylog.org%2Fen%2F2.0%2Fpages%2Fupgrade.html=D=1=AFQjCNE1YuuinT_if2IzizQ81ejR_yw4NA>
>
> and http://docs.graylog.org/en/2.0/pages/configuration/web_interface.html
> when upgrading to Graylog 2.0.x.
>
> Cheers,
> Jochen
>
>
> On Friday, 15 July 2016 14:09:46 UTC+2, Anant Sawant wrote:
>>
>> Hi,
>>
>> I have installed graylog 2.0 ga on ubuntu 14.0.4 manually today. Followed
>> the following url for installation "
>> http://docs.graylog.org/en/2.0/pages/installation/manual_setup.html; .
>> After starting the graylogctl script for the first time and hitting
>> 127.0.0.1:9000 we are getting {"type":"ApiError","message":HTTP 404 Not
>> Found} in the browser.
>>
>> The server logs says the "Graylog server up and running". I am unable to
>> locate the issue as I am not getting any error at the logs.Please give me
>> some advise to overcome this issue.
>>
>> I have attached the logs file for your perusal.
>> Please find the attachment.
>>
>> Thanks in Advance!!
>>
>> Anant.
>>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/b02c9fda-1d81-4c7e-9f7e-8d6bc89f8da1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
# If you are running more than one instances of Graylog server you have to
select one of these
# instances as master. The master will perform some periodical tasks that
non-masters won't perform.
is_master = true
# The auto-generated node ID will be stored in this file and read after
restarts. It is a good idea
# to use an absolute file path here if you are starting Graylog server from
init scripts or similar.
node_id_file = /etc/graylog/server/node-id
# You MUST set a secret to secure/pepper the stored user passwords here. Use at
least 64 characters.
# Generate one by using for example: pwgen -N 1 -s 96
password_secret =
JSR76nAgIPswrCtrztqaf1fczbqGpf13VMlGGor3yfaz9FoJNabgVVKhkHvqwEjQFIUIil5ob5oWoWimi6CYLS893rFGXTQG
# The default root user is named 'admin'
#root_username = admin
# You MUST specify a hash password for the root user (which you only need to
initially set up the
# system and in case you lose connectivity to your authentication backend)
# This password cannot be changed using the API or via the web interface. If
you need to change it,
#
[graylog2] Re: Unble to get graylog webinterface
Hi Jochen,
I am unable to get the web interface in the browser when I hit
"127.0.0.1:9000" all I get is the following message on the screen
"{"type":"ApiError","message":HTTP 404 Not Found}", I am not sure what is
the cause of this error. The logs says "2016-07-18 12:36:19,915 INFO :
org.graylog2.initializers.WebInterfaceService - Started Web Interface at
<http://127.0.0.1:9000/>" and also "2016-07-18 12:36:22,465 INFO :
org.graylog2.bootstrap.ServerBootstrap - Graylog server up and running.' So
the problem is I am not getting the UI of the "Graylog" only the above
mentioned message. I am attaching the Logs file of Graylog may be you can
find something which I am certainly missing to locate.
Thanking in Advance
Anant.
On Friday, 15 July 2016 21:58:38 UTC+5:30, Jochen Schalanda wrote:
>
> Hi Anant,
>
> please describe first in detail what's not working for you.
>
> Cheers,
> Jochen
>
> On Friday, 15 July 2016 15:20:24 UTC+2, Anant Sawant wrote:
>>
>> HI ,
>>
>> Thanks for such a quick replay!!
>>
>> I am already running the web interface on http://127.0.0.1:9000
>> <http://www.google.com/url?q=http%3A%2F%2F127.0.0.1%3A9000%2F=D=1=AFQjCNH_ul1nQQH15pwQIbCL9H9JBCrnww>
>>
>> and I have not upgraded Graylog to this version I have installed a fresh
>> release in completely new environment(machine). What do you mean by "if you
>> tried to get the root resource of the Graylog REST API (this will change in
>> Graylog 2.1.0)." sory but I do not understand.
>> I went through the configuration again and compared it with your
>> suggested configurations "
>> http://docs.graylog.org/en/2.0/pages/upgrade.html
>> <http://www.google.com/url?q=http%3A%2F%2Fdocs.graylog.org%2Fen%2F2.0%2Fpages%2Fupgrade.html=D=1=AFQjCNE1YuuinT_if2IzizQ81ejR_yw4NA>
>>
>> and http://docs.graylog.org/en/2.0/pages/configuration/web_interface.html;
>> but did not found any different. Is there anything we need to change in the
>> conf files. How do we overcome this?? I am attaching the conf files.
>>
>> Again Thanks in advance!!
>>
>> Anant
>>
>> On Friday, 15 July 2016 18:31:47 UTC+5:30, Jochen Schalanda wrote:
>>>
>>> Hi Anant,
>>>
>>> according to your logs, the Graylog REST API and the Graylog web
>>> interface have been successfully started:
>>>
>>> 2016-07-15 16:38:00,442 INFO :
>>>> org.graylog2.initializers.WebInterfaceService - Started Web Interface at <
>>>> http://127.0.0.1:9000/>
>>>> 2016-07-15 16:38:00,443 INFO :
>>>> org.graylog2.shared.initializers.RestApiService - Started REST API at <
>>>> http://127.0.0.1:12900/>
>>>
>>>
>>> The response you've mentioned ({"type":"ApiError","message":"HTTP 404
>>> Not Found"}) is totally normal if you tried to get the root resource of
>>> the Graylog REST API (this will change in Graylog 2.1.0).
>>>
>>> Make sure to open http://127.0.0.1:9000/
>>> <http://www.google.com/url?q=http%3A%2F%2F127.0.0.1%3A9000%2F=D=1=AFQjCNH_ul1nQQH15pwQIbCL9H9JBCrnww>
>>> for
>>> accessing the Graylog web interface and not http://127.0.0.1:12900/,
>>> which is the Graylog REST API.
>>>
>>> Also make sure to read http://docs.graylog.org/en/2.0/pages/upgrade.html
>>> <http://www.google.com/url?q=http%3A%2F%2Fdocs.graylog.org%2Fen%2F2.0%2Fpages%2Fupgrade.html=D=1=AFQjCNE1YuuinT_if2IzizQ81ejR_yw4NA>
>>>
>>> and
>>> http://docs.graylog.org/en/2.0/pages/configuration/web_interface.html
>>> when upgrading to Graylog 2.0.x.
>>>
>>> Cheers,
>>> Jochen
>>>
>>>
>>> On Friday, 15 July 2016 14:09:46 UTC+2, Anant Sawant wrote:
>>>>
>>>> Hi,
>>>>
>>>> I have installed graylog 2.0 ga on ubuntu 14.0.4 manually today.
>>>> Followed the following url for installation "
>>>> http://docs.graylog.org/en/2.0/pages/installation/manual_setup.html; .
>>>> After starting the graylogctl script for the first time and hitting
>>>> 127.0.0.1:9000 we are getting {"type":"ApiError","message":HTTP 404
>>>> Not Found} in the browser.
>>>>
>>>> The server logs says the "Graylog server up and running". I am unable
>>>> to locate the issue as I am not getting any error at the logs.Please give
>>>> me some advise to overcome
[graylog2] Graylog 2.0 compilation error : Cannot run program "git
Hi, I am compiling the Graylog 2.0 on windows 7 using eclipse. I am facing the issue related to "Git" as follows Failed to execute goal org.codehaus.mojo:buildnumber-maven-plugin:1.4:create (default) on project graylog2-server: Cannot get the revision information from the scm repository : [ERROR] Exception while executing SCM command. Error while executing command. Error while executing process. Cannot run program "git" (in directory "D:\Anant\Graylog 2.0 GA\Graylog 2.0 GA Source code\graylog2-server-2.0\graylog2-server"): CreateProcess error=2, The system cannot find the file specified After facing this issue for the first time I installed Git 2.9.0 on my machine but still I am getting the same error. I have also added the following to the system variable "C:\Program Files\Git\cmd;C:\Program Files\Git\bin". The full track trace is as follows. [INFO] Scanning for projects... [INFO] [INFO] Reactor Build Order: [INFO] [INFO] Graylog [INFO] graylog2-server [INFO] integration-tests [INFO] [INFO] Using the builder org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder with a thread count of 1 [INFO] [INFO] [INFO] Building Graylog 2.0.1-SNAPSHOT [INFO] [INFO] [INFO] --- maven-clean-plugin:3.0.0:clean (default-clean) @ graylog2-parent --- [INFO] [INFO] --- maven-enforcer-plugin:1.2:enforce (enforce-maven) @ graylog2-parent --- [INFO] [INFO] --- build-helper-maven-plugin:1.10:parse-version (parse-version) @ graylog2-parent --- [INFO] [INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) @ graylog2-parent >>> [INFO] [INFO] --- maven-enforcer-plugin:1.2:enforce (enforce-maven) @ graylog2-parent --- [INFO] [INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) @ graylog2-parent <<< [INFO] [INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ graylog2-parent --- [INFO] [INFO] --- maven-javadoc-plugin:2.10.3:jar (attach-javadocs) @ graylog2-parent --- [INFO] Not executing Javadoc as the project is not a Java classpath-capable package [INFO] [INFO] --- maven-install-plugin:2.5.2:install (default-install) @ graylog2-parent --- [INFO] Installing D:\Anant\Graylog 2.0 GA\Graylog 2.0 GA Source code\graylog2-server-2.0\pom.xml to C:\Users\anants\.m2\repository\org\graylog2\graylog2-parent\2.0.1-SNAPSHOT\graylog2-parent-2.0.1-SNAPSHOT.pom [INFO] [INFO] [INFO] Building graylog2-server 2.0.1-SNAPSHOT [INFO] [INFO] [INFO] --- maven-clean-plugin:3.0.0:clean (default-clean) @ graylog2-server --- [INFO] Deleting D:\Anant\Graylog 2.0 GA\Graylog 2.0 GA Source code\graylog2-server-2.0\graylog2-server\target [INFO] Deleting D:\Anant\Graylog 2.0 GA\Graylog 2.0 GA Source code\graylog2-server-2.0\graylog2-web-interface (includes = [build/**/*, node_modules/**/*], excludes = []) [INFO] [INFO] --- maven-enforcer-plugin:1.2:enforce (enforce-maven) @ graylog2-server --- [INFO] [INFO] --- buildnumber-maven-plugin:1.4:create (default) @ graylog2-server --- [INFO] Executing: cmd.exe /X /C "git rev-parse --verify HEAD" [INFO] Working directory: D:\Anant\Graylog 2.0 GA\Graylog 2.0 GA Source code\graylog2-server-2.0\graylog2-server [INFO] [INFO] Reactor Summary: [INFO] [INFO] Graylog ... SUCCESS [ 13.072 s] [INFO] graylog2-server ... FAILURE [02:26 min] [INFO] integration-tests . SKIPPED [INFO] [INFO] BUILD FAILURE [INFO] [INFO] Total time: 02:39 min [INFO] Finished at: 2016-06-30T20:09:02+05:30 [INFO] Final Memory: 33M/261M [INFO] [ERROR] Failed to execute goal org.codehaus.mojo:buildnumber-maven-plugin:1.4:create (default) on project graylog2-server: Cannot get the revision information from the scm repository : [ERROR] Exception while executing SCM command. Error while executing command. Error while executing process. Cannot run program "git" (in directory "D:\Anant\Graylog 2.0 GA\Graylog 2.0 GA Source code\graylog2-server-2.0\graylog2-server"): CreateProcess error=2, The system cannot find the file specified [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven
[graylog2] Rest api for Logs
Hi Everyone, Does any body knows if there is any REST api for graylog to get the logs based on time? For example api to get logs for last 30 days. If its not can we directly get the logs form elasticsearch by querying elaticsearch.? Thanks in advance Anant. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0d0abfef-4074-4632-bdbf-ea53b9bdc17e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [graylog2] Graylog 2.0 SSL issue
Hi Dennis, I am looking for other details that I might have missed but there is this strange thing happening, I tried to run Graylog on "Midori" without any changes in the configuration and its running just fine, but its not on Mozilla, IE or Chrome. I am attaching the screenshot. Please advise Thanks, Anant. On Wednesday, 24 August 2016 18:07:39 UTC+5:30, Dennis Oelkers wrote: > > Hey Anant, > > it looks like https://172.16.0.78:12900/ > <https://www.google.com/url?q=https%3A%2F%2F172.16.0.78%3A12900%2F=D=1=AFQjCNEFnFn6AEv6xETZtuF1vJ6d1VTYQg> > > is not reachable from your browser. Please make sure that your browser can > connect to the REST API. For further information, please have a look at > http://docs.graylog.org/en/2.0/pages/configuration/web_interface.html. > > Kind regards, > D. > > > On 24.08.2016, at 13:47, Anant Sawant <sawant...@gmail.com > > wrote: > > > > Hi all, > > > > We have installed Graylog 2.0 manually on ubuntu 14.04.1 and was > running fine on http. > > We are now trying to run Graylog 2.0 web interface to run on "HTTPS". > For this we followed the following documentation " > http://docs.graylog.org/en/2.0/pages/configuration/https.html#ssl-setup;. > > > > After making the required changes we are unable to get the web interface > on "https://x.x.x.x:9000;. > > > > I have attached the screenshot of the error and also the certificates > created following the documentations and the server.conf file. > > > > Please advise to overcome this. > > > > Thanks in advance. > > Anant > > > > -- > > You received this message because you are subscribed to the Google > Groups "Graylog Users" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to graylog2+u...@googlegroups.com . > > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/0429a7ba-defa-40c7-9f6d-aa3eb8b637b5%40googlegroups.com. > > > > For more options, visit https://groups.google.com/d/optout. > > > > -- > Tel.: +49 (0)40 609 452 077 > Fax.: +49 (0)40 609 452 078 > > TORCH GmbH - A Graylog company > Poolstrasse 21 > 20355 Hamburg > Germany > > Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 > Geschäftsführer: Lennart Koopmann (CEO) > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/30f43a11-7053-420c-903c-87c04b22b136%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Custom Graylog development query
Hi Graylog Team Is it possible to delete logs from graylog based on different inputs. I have two inputs on udp syslog from two different machines pointed to single graylog instance. Can i selectively delete particular logs based on date and time or based on the inputs. If the answer is negative. Then what will it take to develop this feature. Whom do i speak to for developing this feature and if at all this is possible or not. Thanks Anant -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/49f96e9b-faa1-4c54-b31e-c969061d407f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Store full message in Grayog Use??
Hi Graylog Team In syslog udp/tcp inputs there is the following option. "Store full message? (optional)" What is the use of this option?. Does it mean if I send logs/data to Graylog via syslog, when the above option is *unchecked *Graylog is not storing the complete log but incomplete or partial log. Or rather if I am sending 1 gb of logs to Graylog and if the option is *unchecked *Graylog eventually will store lesser amount on logs/data. Thanks Anant -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/22242236-d504-4ae8-a6e4-c66fa08368e1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Is it possible to delete logs in Graylog 2.0 based on source?
Hi Graylog Team We have a single instance of graylog running with single node. We have pointed two sensors (two systems) via syslog udp to graylog. When i do a search in all messages it shows 42 million events searched in three indices namely graylog2_0 graylog2_1 graylog2_2 Now my query is that as mentioned we have two system from where logs are being pushed to graylog. System A and System B. I would like delete logs of system A for a particular date. So is it possible to know in which indices the logs from System A are stored and remove those particular indices/logs on a particular date? Thanks in advance -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/40ca6243-5107-4add-857f-fa82e2e0e035%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Using custom fields in drool rules
Hi,
I am trying to execute drool rules using some of the fields which I have
created using extractors, but the drool rule fails to execute. I have
created a field named month which extracts the month name from log, Below
is the rule "Rewrite month" I am trying to execute. FYI the "Rewrite
localhost host" rule works just fine.
// The following header lines are automatically added by Graylog server.
//package org.graylog2.rules
//import org.graylog2.plugin.Message
//global org.slf4j.Logger log
rule "Rewrite source host"
when
m : Message( source == "xyz" )
then
m.addField("source", "abcd" );
log.info( "[Overwrite source rule fired] : " + m.toString() );
end
rule "Rewrite month"
when
m : Message( _month_ == "Jan" )
then
m.addField("_month_", "Feb" );
log.info( "[Overwrite month rule fired] : " + m.toString() );
end
Q1. Is it possible to use custom fields into drool rules.
Q2. If possible where can I find the docs which tells how to do it.
Q3. If a rule such as "Rewrite source host" mentioned above is successfully
executed, does the original log is stored into elasticsearch or the
modified logs is stored or are both logs stored?
Q4. Is it possible to have multiple .drl file or only one file will have
multiple rules?
Attaching the logs file "graylog-server.log"
Thanks in Advance!!
Anant Sawant.
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/864aeea5-36fe-4805-9dda-3426acb9426e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
2017-01-10 18:24:11,007 ERROR:
org.drools.compiler.kie.builder.impl.AbstractKieModule - Unable to build
KieBaseModel:defaultKieBase
Unable to Analyse Expression gl2_remote_ip == "172.16.0.78":
[Error: unable to resolve method using strict-mode:
org.graylog2.plugin.Message.gl2_remote_ip()]
[Near : {... gl2_remote_ip == "172.16.0.78" }]
^
[Line: 23, Column: 8] : [Rule name='Rewrite IP address']
2017-01-10 18:24:11,007 WARN : org.graylog2.rules.DroolsEngine - Unable to add
rules due to compilation errors.
org.graylog2.rules.RulesCompilationException: Message [id=1, level=ERROR,
path=r1.drl, line=23, column=0
text=Unable to Analyse Expression gl2_remote_ip == "172.16.0.78":
[Error: unable to resolve method using strict-mode:
org.graylog2.plugin.Message.gl2_remote_ip()]
[Near : {... gl2_remote_ip == "172.16.0.78" }]
^
[Line: 23, Column: 8]]
at org.graylog2.rules.DroolsEngine.createKJar(DroolsEngine.java:232)
~[graylog.jar:?]
at
org.graylog2.rules.DroolsEngine.createAndDeployJar(DroolsEngine.java:194)
~[graylog.jar:?]
at org.graylog2.rules.DroolsEngine.deployRules(DroolsEngine.java:169)
[graylog.jar:?]
at org.graylog2.rules.DroolsEngine.commitRules(DroolsEngine.java:147)
[graylog.jar:?]
at org.graylog2.rules.DroolsEngine.addRule(DroolsEngine.java:89)
[graylog.jar:?]
at
org.graylog2.rules.DroolsEngine.addRulesFromFile(DroolsEngine.java:102)
[graylog.jar:?]
at
org.graylog2.bindings.providers.RulesEngineProvider.(RulesEngineProvider.java:44)
[graylog.jar:?]
at
org.graylog2.bindings.providers.RulesEngineProvider$$FastClassByGuice$$3947f391.newInstance()
[graylog.jar:?]
at
com.google.inject.internal.cglib.reflect.$FastConstructor.newInstance(FastConstructor.java:40)
[graylog.jar:?]
at
com.google.inject.internal.DefaultConstructionProxyFactory$1.newInstance(DefaultConstructionProxyFactory.java:61)
[graylog.jar:?]
at
com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:105)
[graylog.jar:?]
at
com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:85)
[graylog.jar:?]
at
com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:267)
[graylog.jar:?]
at
com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
[graylog.jar:?]
at
com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1103)
[graylog.jar:?]
at
com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
[graylog.jar:?]
at
com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:145)
[graylog.jar:?]
at
com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:41)
[graylog.jar:?]
at
com.google.inject.interna
