Hi Jeremy, you can use Logstash or Filebeat (or any other log shipper) to backfill data into Graylog, too. Simply point it to the file (or source) you want to use as an input and use a GELF output to send data into Graylog. Also make sure that the timestamp field is valid, because otherwise Graylog would use the ingestion time as timestamp (which is not what you want to have when filling in historic logs).
Cheers, Jochen On Wednesday, 13 July 2016 04:10:04 UTC+2, Jeremy Farr wrote: > > How would I go about backfilling logs into graylog? Does it just handle > it auto-magically? For instance, I'd like to analyze some transaction data > that spans possibly the entire month. I can get the information at smaller > intervals (i.e. Daily or weekly) but I would only be looking at it in > monthly, quarterly or annual periods of time. I've seen people discussing > using logstash to backfill elasticsearch but I couldn't find anything about > back filling graylog specifically. Thanks in advance. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1baca34e-1a98-4404-ac32-0083eab5008c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
