Hello Joe, seems as if your search-window is too small (only 5 minutes back). What happens, if you switch to "Search in all messages"?
regards, Cornelius On Sunday, June 29, 2014 3:15:52 PM UTC+2, Joseph DJOMEDA wrote: > > Hello All, > > Anybody on the rescue? I am on the verge on giving up. I am not sure what > exactly is wrong with my setup. I was going to push this for official use > but with these entry level obstacles , I have not been able to appreciate > all graylog2 has to offer. > > Thanks to all those who tried to help me. > > On Thursday, June 12, 2014 3:25:37 PM UTC, Joseph DJOMEDA wrote: >> >> >> >> >> Hello All >> >> Sorry for the late response. I have travelled. I have added logstash user >> and group and added logstash to adm group. I verified I could open (less >> and nano) the log files . For some reason I could still see the line: >> _discover_file_glob: /var/lib/tomcat7/b_log.log: glob is: [] >> {:level=>:debug, >> :file=>"filewatch/watch.rb", :line=>"117"} >> >> But contrary to previous time below is what I can notice on my gralog2 >> >> >> >> <https://lh4.googleusercontent.com/-EGC-uKsVyo4/U5nFi7RTwTI/AAAAAAAAA6w/zhKYELzJRnM/s1600/Selection_011.png> >> >> >> <https://lh5.googleusercontent.com/-RZgWHXkibxs/U5nFZZcCrPI/AAAAAAAAA6k/8pF1kLcyXfQ/s1600/Selection_012.png> >> I know I am doing a bad job at this whole thing but it's not really >> straight forward for me. I don't know what all these 3,262 evens are. >> I can't find anything useful, I don't even know it it's finally working >> well >> >> >> >> On Friday, May 30, 2014 9:13:02 AM UTC, Arkadiy Shinkarev wrote: >>> >>> You don't need GELF TCP input, 'cause logstash sends GELF over UDP. >>> _discover_file_glob: /var/lib/tomcat7/b_log.log: glob is: [] >>> {:level=>:debug, >>> :file=>"filewatch/watch.rb", :line=>"117"} >>> >>> The message "glob is: []" in most cases means that logstash process does >>> not have permissions to read file. >>> >>> >>> On Thursday, May 29, 2014 5:48:02 PM UTC+4, Joseph DJOMEDA wrote: >>>> >>>> Hi Thanks for the feedback and your effort. >>>> >>>> Did you explicitly created a tcp gelf input? >>>> >>>> >>>> On Thursday, May 29, 2014 12:26:26 PM UTC, Dmitri Stoljarov wrote: >>>>> >>>>> Joseph, >>>>> >>>>> You cannot telnet to UDP port (your netstat shows only udp port). >>>>> >>>>> Here's my output: >>>>> >>>>> $ netstat -ano | grep 12201 |grep -v ESTAB >>>>> tcp 0 0 0.0.0.0:12201 >>>>> 0.0.0.0:* LISTEN off (0.00/0/0) >>>>> udp 0 0 0.0.0.0:12201 >>>>> 0.0.0.0:* off (0.00/0/0) >>>>> >>>>> >>>>> >>>>> On Thursday, May 29, 2014 2:28:47 PM UTC+3, Joseph DJOMEDA wrote: >>>>>> >>>>>> Hello Arkadiy , >>>>>> >>>>>> thanks for your effort my answers *inline* >>>>>> >>>>>> >>>>>> -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.