Re: [graylog2] Graphite

[Jonathan Buch]

Most awesome,

many thanks,

Jo

Am Montag, 10. Februar 2014 19:35:54 UTC+1 schrieb lennart:
>
> Hey Jonathan, 
>
> the Graphite forwarding will follow in future releases. I created this 
> issue to make sure we properly schedule it after 0.20.0: 
> https://github.com/Graylog2/graylog2-server/issues/421 
>
> Thanks, 
> Lennart 
>
> On Mon, Feb 10, 2014 at 5:18 PM, Jonathan Buch > 
> wrote: 
> > Hi, 
> > 
> > I just got around to trying the new 0.20 branch of graylog2 with the 
> goal of 
> > eventually phasing out a 0.9.* installation. 
> > 
> > Now, I've read that Graphite is included 
> > (http://blog.torch.sh/graylog2-v0-20-0-preview-5-has-been-released/), 
> > however on investigating that implementation seems to be mostly removed 
> > since the preview shortly before 0.20-rc.1 
> > 
> > * A GraphiteFormatter exists but the method contents are commented out 
> > * 29ca7e6f4c9ac7 "alerts are now sending emails. #356" removes the rest 
> of 
> > the graphite implementation unceremoniously with "Whoop!" as the only 
> > comment. 
> > 
> > Is there a plan to revive this functionality?  I guess it wouldn't 
> really be 
> > hard to simply query JMX and use the available metrics and shove them 
> into 
> > graphite, but I was hoping to skip that extra step. 
> > 
> > Greetings, 
> > 
> > Jo 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups 
> > "graylog2" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an 
> > email to graylog2+u...@googlegroups.com . 
> > For more options, visit https://groups.google.com/groups/opt_out. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [graylog2] Re: GELF & multiline-Logs

[Kay Röpke]

cc'ing mailing list.

I just tested this and it works as expected for me.
Could you please share an example message?

Just to make sure you are also running the RC2 of the web interface,
right? Because the bug was there and not in the server.

I sent:

curl -0 -XPOST http://localhost:12202/gelf -d
'{"short_message":"ohai", "full_message":"this
is
a
test
", "host":"localhost", "facility":"test"}'

to my HTTP GELF input and it showed up as I expected (this is running RC2 here).

Best,
Kay

On Mon, Feb 10, 2014 at 9:54 PM,   wrote:
> Hi Kai, hi Lennart,
>
> I've just downloaded und installed RC2. The Update worked out of the box, I
> played a little with the new version, again an improvement - e.g. alerting
> now works!
> But unfortunately multiline-Line-Breaks still don't work for me :-(
> The GELF-Event contains them, but within the web-interface there are still
> no line-breaks :-(
>
> Ciao, Cornelius
>
>
>
> On Wednesday, February 5, 2014 3:12:38 PM UTC+1, Kay Röpke wrote:
>>
>> This will be fixed in RC2.
>>
>> Thanks for your report!
>>
>>
>> On Wed, Feb 5, 2014 at 10:56 AM, Lennart Koopmann  wrote:
>>>
>>> Thanks for reporting this! Please follow this issue:
>>> https://github.com/Graylog2/graylog2-web-interface/issues/601
>>>
>>> Cheers,
>>> Lennart
>>>
>>> On Tue, Feb 4, 2014 at 7:44 PM, Grégory Nuyttens
>>>  wrote:
>>> > At this time, I try a lot of thing:
>>> >
>>> > - simple messages with gelf and with an "\n" character inside my
>>> > message
>>> > - with logstash and multiline option
>>> >
>>> > but in the graylog web interface I only show a "blank" between multiple
>>> > lines and no multiline display :-/
>>> >
>>> > I think you told about this issue:
>>> > https://github.com/Graylog2/graylog2-web-interface/pull/126, it seems
>>> > to be
>>> > closed and resolved but the problem is come back in this version???
>>> >
>>> > Thanks if anyone have a solution or we can create again a new issue
>>> > about this problem
>>> >
>>> >
>>> >
>>> > On Tuesday, January 28, 2014 4:24:40 PM UTC+1, corneli...@gmail.com
>>> > wrote:
>>> >>
>>> >> Hi,
>>> >>
>>> >> first of all I want to say that I'm quite satisfied with graylog2
>>> >> 0.2.0
>>> >> rc.1-1.
>>> >> But I have a question regarding multiline-Display within
>>> >> "full_message".
>>> >> Although line-breaks, i.e. \n are included within the GELF-Message
>>> >> from
>>> >> logstash, e.g. Stacktraces are displayed as floating text.
>>> >> I read that there was an Issue 9 months ago, but that should be fixed.
>>> >> Is
>>> >> the same problem re-occuring? Or am I missing something?
>>> >>
>>> >> Regards, Cornelius
>>> >>
>>> > --
>>> > You received this message because you are subscribed to the Google
>>> > Groups
>>> > "graylog2" group.
>>> > To unsubscribe from this group and stop receiving emails from it, send
>>> > an
>>> > email to graylog2+u...@googlegroups.com.
>>>
>>> > For more options, visit https://groups.google.com/groups/opt_out.
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups
>>> "graylog2" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an
>>> email to graylog2+u...@googlegroups.com.
>>>
>>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [graylog2] Re: rc-1.1 'streams' page white pages with no errors

[abhay]

I faced the same issue.
After flushing older graylog2 version data(0.9.6) it's working fine for me. 

On Tuesday, February 11, 2014 12:04:00 AM UTC+5:30, lennart wrote:
>
> That was reported by several users before and all got it fixed by 
> dropping the streams collection in MongoDB. From what I could 
> reproduce the streams collection in all cases contained data from 
> previous installations. 
>
> Can you make sure that you have a clean MongoDB database? 
>
> On Mon, Feb 10, 2014 at 6:01 PM,  > 
> wrote: 
> > I am having this same issue as well, but I have noticed that non-admin 
> users 
> > can access the stream screen fine (without the ability to create new 
> > streams) 
> > 
> > When I tried to open up the user list to edit permissions accordingly, 
> it 
> > spits out the following error: 
> > 
> > 2014-02-10 16:58:00,884 - [ERROR] - from models.UserService in 
> > play-akka.actor.default-dispatcher-13 
> > Could not retrieve list of users 
> > lib.APIException: API call failed GET http://10.255.255.3:12900/users 
> > returned 500 Internal Server Error body: java.lang.NullPointerException 
> > 
> > Not sure if these issues are related. 
> > 
> > 
> > On Tuesday, February 4, 2014 1:46:49 PM UTC-5, John Doe wrote: 
> >> 
> >> hello all. 
> >> 
> >> i have a fresh install of rc-1.1, es 0.90.10, and mongo 2.4.9. all of 
> the 
> >> web interface works except for 'streams' which just whitepages and 
> doesnt 
> >> log any errors. Can someone point me in the right direction to 
> troubleshoot 
> >> this? 
> > 
> > -- 
> > You received this message because you are subscribed to the Google 
> Groups 
> > "graylog2" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an 
> > email to graylog2+u...@googlegroups.com . 
> > For more options, visit https://groups.google.com/groups/opt_out. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [graylog2] Exception on Users Tab

[abhay]

Hi Lennart,

After flushing old graylog2 version(0.9.6) data, it's working fine.
Thanks for your help.

I am getting an issue while setting up alerts:
I am able to setup stream correctly. However when am trying to send dummy 
alert i got following exception:

Oh no, something went wrong!
*Reason:* Could not add alert receiver: We expected HTTP 200, but got a 
HTTP -1.

Stacktrace
   
   - lib.ApiClientImpl$ApiRequestBuilder#execute (*ApiClientImpl.java:415*)
   - models.StreamService#sendDummyAlert (*StreamService.java:118*)
   - controllers.AlertsController#sendDummyAlert (
   *AlertsController.java:268*)
   - Routes$$anonfun$routes$1$$anonfun$applyOrElse$34$$anonfun$apply$100#apply 
   (*routes_routing.scala:853*)
   - Routes$$anonfun$routes$1$$anonfun$applyOrElse$34$$anonfun$apply$100#apply 
   (*routes_routing.scala:853*)
   - play.core.Router$HandlerInvoker$$anon$7$$anon$2#invocation (
   *Router.scala:183*)
   - play.core.Router$Routes$$anon$1#invocation (*Router.scala:377*)
   - play.core.j.JavaAction$$anon$1#call (*JavaAction.scala:56*)
   - play.GlobalSettings$1#call (*GlobalSettings.java:64*)
   - play.mvc.Security$AuthenticatedAction#call (*Security.java:45*)
   - play.core.j.JavaAction$$anon$3#apply (*JavaAction.scala:91*)
   - play.core.j.JavaAction$$anon$3#apply (*JavaAction.scala:90*)
   - play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (
   *FPromiseHelper.scala:82*)
   - play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (
   *FPromiseHelper.scala:82*)
   - scala.concurrent.Future$$anonfun$flatMap$1#apply (*Future.scala:251*)
   - scala.concurrent.Future$$anonfun$flatMap$1#apply (*Future.scala:249*)
   - scala.concurrent.impl.CallbackRunnable#run (*Promise.scala:32*)
   - play.core.j.HttpExecutionContext$$anon$2#run (
   *HttpExecutionContext.scala:37*)
   - akka.dispatch.TaskInvocation#run (*AbstractDispatcher.scala:42*)
   - akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask#exec (
   *AbstractDispatcher.scala:386*)
   - scala.concurrent.forkjoin.ForkJoinTask#doExec (*ForkJoinTask.java:260*)
   - scala.concurrent.forkjoin.ForkJoinPool$WorkQueue#runTask (
   *ForkJoinPool.java:1339*)
   - scala.concurrent.forkjoin.ForkJoinPool#runWorker (
   *ForkJoinPool.java:1979*)
   - scala.concurrent.forkjoin.ForkJoinWorkerThread#run (
   *ForkJoinWorkerThread.java:107*)


Please suggest solution for this?
 
Thanks
Abhay


On Monday, February 10, 2014 6:15:42 PM UTC+5:30, lennart wrote:
>
> Hey Abhay, 
>
> could it be that you are using a MongoDB database that was filled by a 
> previous Graylog2 version? 
>
> Thanks, 
> Lennart 
>
> On Mon, Feb 10, 2014 at 12:44 PM,  > wrote: 
> > Hi All, 
> > 
> > I just setup graylog2 version(graylog2-v0-20-0-rc-1-1) on production. 
> > When i click on system/users i am getting this error: 
> > 
> > lib.APIException: API call failed GET 
> http://@graylog-server-ip:12900/users 
> > returned 500 Internal Server Error body: java.lang.NullPointerException 
> > at org.graylog2.users.User.getName(User.java:154) 
> > at 
> > 
> org.graylog2.rest.resources.users.UsersResource.toMap(UsersResource.java:410) 
>
> > at 
> > 
> org.graylog2.rest.resources.users.UsersResource.toMap(UsersResource.java:404) 
>
> > at 
> > 
> org.graylog2.rest.resources.users.UsersResource.listUsers(UsersResource.java:96)
>  
>
> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
> > at 
> > 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) 
>
> > at 
> > 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>  
>
> > at java.lang.reflect.Method.invoke(Method.java:606) 
> > at 
> > 
> org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory$1.invoke(ResourceMethodInvocationHandlerFactory.java:81)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:151)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:171)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:152)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:104)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:402)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:349)
>  
>
> > at 
> > 
> org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:106)
>  
>
> > at 
> org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:259) 
> > at org.glassfish.jersey.internal.Errors$1.call(Errors.java:271) 
> > at org.glassfish.jersey.internal.Errors$1.call(Errors

Re: [graylog2] Exception on Users Tab

[Dennis Oelkers]

Hello Abhay,

thank you very much for reporting this behaviour. I tried to reproduce it but 
was unable to do so. Is this error reproducable (every time/sometimes/not)? Can 
you give me an overview of the alerting configuration of that stream? Is there 
anything in the graylog2-server log?

Kind regards,
D.

--
TORCH GmbH
Gertrudenstrasse 3
20095 Hamburg
Germany

https://www.torch.sh/

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO), Hass Chapman (CEO)

On 11. Februar 2014 at 11:42:34, ab...@fab.com (ab...@fab.com) wrote:

Hi Lennart,

After flushing old graylog2 version(0.9.6) data, it's working fine.
Thanks for your help.

I am getting an issue while setting up alerts:
I am able to setup stream correctly. However when am trying to send dummy alert 
i got following exception:

Oh no, something went wrong!
Reason: Could not add alert receiver: We expected HTTP 200, but got a HTTP -1.


Stacktrace
lib.ApiClientImpl$ApiRequestBuilder#execute (ApiClientImpl.java:415)
models.StreamService#sendDummyAlert (StreamService.java:118)
controllers.AlertsController#sendDummyAlert (AlertsController.java:268)
Routes$$anonfun$routes$1$$anonfun$applyOrElse$34$$anonfun$apply$100#apply 
(routes_routing.scala:853)
Routes$$anonfun$routes$1$$anonfun$applyOrElse$34$$anonfun$apply$100#apply 
(routes_routing.scala:853)
play.core.Router$HandlerInvoker$$anon$7$$anon$2#invocation (Router.scala:183)
play.core.Router$Routes$$anon$1#invocation (Router.scala:377)
play.core.j.JavaAction$$anon$1#call (JavaAction.scala:56)
play.GlobalSettings$1#call (GlobalSettings.java:64)
play.mvc.Security$AuthenticatedAction#call (Security.java:45)
play.core.j.JavaAction$$anon$3#apply (JavaAction.scala:91)
play.core.j.JavaAction$$anon$3#apply (JavaAction.scala:90)
play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (FPromiseHelper.scala:82)
play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (FPromiseHelper.scala:82)
scala.concurrent.Future$$anonfun$flatMap$1#apply (Future.scala:251)
scala.concurrent.Future$$anonfun$flatMap$1#apply (Future.scala:249)
scala.concurrent.impl.CallbackRunnable#run (Promise.scala:32)
play.core.j.HttpExecutionContext$$anon$2#run (HttpExecutionContext.scala:37)
akka.dispatch.TaskInvocation#run (AbstractDispatcher.scala:42)
akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask#exec 
(AbstractDispatcher.scala:386)
scala.concurrent.forkjoin.ForkJoinTask#doExec (ForkJoinTask.java:260)
scala.concurrent.forkjoin.ForkJoinPool$WorkQueue#runTask 
(ForkJoinPool.java:1339)
scala.concurrent.forkjoin.ForkJoinPool#runWorker (ForkJoinPool.java:1979)
scala.concurrent.forkjoin.ForkJoinWorkerThread#run 
(ForkJoinWorkerThread.java:107)

Please suggest solution for this?
 
Thanks
Abhay


On Monday, February 10, 2014 6:15:42 PM UTC+5:30, lennart wrote:
Hey Abhay,

could it be that you are using a MongoDB database that was filled by a
previous Graylog2 version?

Thanks,
Lennart

On Mon, Feb 10, 2014 at 12:44 PM,   wrote:
> Hi All,
>
> I just setup graylog2 version(graylog2-v0-20-0-rc-1-1) on production.
> When i click on system/users i am getting this error:
>
> lib.APIException: API call failed GET http://@graylog-server-ip:12900/users
> returned 500 Internal Server Error body: java.lang.NullPointerException
> at org.graylog2.users.User.getName(User.java:154)
> at
> org.graylog2.rest.resources.users.UsersResource.toMap(UsersResource.java:410)
> at
> org.graylog2.rest.resources.users.UsersResource.toMap(UsersResource.java:404)
> at
> org.graylog2.rest.resources.users.UsersResource.listUsers(UsersResource.java:96)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at
> org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory$1.invoke(ResourceMethodInvocationHandlerFactory.java:81)
> at
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:151)
> at
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:171)
> at
> org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:152)
> at
> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:104)
> at
> org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:402)
> at
> org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:349)
> at
> org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:106)
> at org.glassfish.jersey.server.ServerRuntime$1.run(Serv

Re: [graylog2] Exception on Users Tab

[abhay]

Hey Dennis,

I just fixed this issue.
This exception was coming because my smtp configuration in graylog2.conf 
was not correct.
I had given transport_email_hostname = server name which graylog2 was not 
able to connect.

Thanks
Abhay

On Tuesday, February 11, 2014 4:31:33 PM UTC+5:30, Dennis Oelkers wrote:
>
> Hello Abhay,
>
> thank you very much for reporting this behaviour. I tried to reproduce it 
> but was unable to do so. Is this error reproducable (every 
> time/sometimes/not)? Can you give me an overview of the alerting 
> configuration of that stream? Is there anything in the graylog2-server log?
>
> Kind regards,
> D.
>
> --
> TORCH GmbH
> Gertrudenstrasse 3
> 20095 Hamburg
> Germany
>
> https://www.torch.sh/
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO), Hass Chapman (CEO)
>
> On 11. Februar 2014 at 11:42:34, ab...@fab.com  (
> ab...@fab.com ) wrote:
>
> Hi Lennart, 
>
> After flushing old graylog2 version(0.9.6) data, it's working fine.
> Thanks for your help.
>
> I am getting an issue while setting up alerts:
> I am able to setup stream correctly. However when am trying to send dummy 
> alert i got following exception:
>
>  Oh no, something went wrong! 
>  *Reason:* Could not add alert receiver: We expected HTTP 200, but got a 
> HTTP -1. 
>
>  Stacktrace 
>
>- lib.ApiClientImpl$ApiRequestBuilder#execute (*ApiClientImpl.java:415*
>) 
>- models.StreamService#sendDummyAlert (*StreamService.java:118*) 
>- controllers.AlertsController#sendDummyAlert (
>*AlertsController.java:268*) 
>- 
> Routes$$anonfun$routes$1$$anonfun$applyOrElse$34$$anonfun$apply$100#apply 
>(*routes_routing.scala:853*) 
>- 
> Routes$$anonfun$routes$1$$anonfun$applyOrElse$34$$anonfun$apply$100#apply 
>(*routes_routing.scala:853*) 
>- play.core.Router$HandlerInvoker$$anon$7$$anon$2#invocation (
>*Router.scala:183*) 
>- play.core.Router$Routes$$anon$1#invocation (*Router.scala:377*) 
>- play.core.j.JavaAction$$anon$1#call (*JavaAction.scala:56*) 
>- play.GlobalSettings$1#call (*GlobalSettings.java:64*) 
>- play.mvc.Security$AuthenticatedAction#call (*Security.java:45*) 
>- play.core.j.JavaAction$$anon$3#apply (*JavaAction.scala:91*) 
>- play.core.j.JavaAction$$anon$3#apply (*JavaAction.scala:90*) 
>- play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (
>*FPromiseHelper.scala:82*) 
>- play.core.j.FPromiseHelper$$anonfun$flatMap$1#apply (
>*FPromiseHelper.scala:82*) 
>- scala.concurrent.Future$$anonfun$flatMap$1#apply (*Future.scala:251*) 
>- scala.concurrent.Future$$anonfun$flatMap$1#apply (*Future.scala:249*) 
>- scala.concurrent.impl.CallbackRunnable#run (*Promise.scala:32*) 
>- play.core.j.HttpExecutionContext$$anon$2#run (
>*HttpExecutionContext.scala:37*) 
>- akka.dispatch.TaskInvocation#run (*AbstractDispatcher.scala:42*) 
>- akka.dispatch.ForkJoinExecutorConfigurator$AkkaForkJoinTask#exec (
>*AbstractDispatcher.scala:386*) 
>- scala.concurrent.forkjoin.ForkJoinTask#doExec (
>*ForkJoinTask.java:260*) 
>- scala.concurrent.forkjoin.ForkJoinPool$WorkQueue#runTask (
>*ForkJoinPool.java:1339*) 
>- scala.concurrent.forkjoin.ForkJoinPool#runWorker (
>*ForkJoinPool.java:1979*) 
>- scala.concurrent.forkjoin.ForkJoinWorkerThread#run (
>*ForkJoinWorkerThread.java:107*) 
>
>
>  Please suggest solution for this?
>  
> Thanks
> Abhay
>
>
> On Monday, February 10, 2014 6:15:42 PM UTC+5:30, lennart wrote: 
>>
>> Hey Abhay,
>>
>> could it be that you are using a MongoDB database that was filled by a
>> previous Graylog2 version?
>>
>> Thanks,
>> Lennart
>>
>> On Mon, Feb 10, 2014 at 12:44 PM,   wrote:
>> > Hi All,
>> >
>> > I just setup graylog2 version(graylog2-v0-20-0-rc-1-1) on production.
>> > When i click on system/users i am getting this error:
>> >
>> > lib.APIException: API call failed GET 
>> http://@graylog-server-ip:12900/users
>> > returned 500 Internal Server Error body: java.lang.NullPointerException
>> > at org.graylog2.users.User.getName(User.java:154)
>> > at
>> > 
>> org.graylog2.rest.resources.users.UsersResource.toMap(UsersResource.java:410)
>> > at
>> > 
>> org.graylog2.rest.resources.users.UsersResource.toMap(UsersResource.java:404)
>> > at
>> > 
>> org.graylog2.rest.resources.users.UsersResource.listUsers(UsersResource.java:96)
>> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> > at
>> > 
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>> > at
>> > 
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>> > at java.lang.reflect.Method.invoke(Method.java:606)
>> > at
>> > 
>> org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory$1.invoke(ResourceMethodInvocationHandlerFactory.java:81)
>> > at
>> > 
>> org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(Abs

[graylog2] Callback stream alert to script

[Ryan Averill]

Hey All, 

I absolutely love graylog2 - I've ran it for quite a while in fact I've 
just stored my 200,000,000 message. I was wondering though currently I'm 
running v0.20.0-rc.1-1 and I'm curious to see if/when your going to release 
a callback method to call scripts (bash or python) instead of just email 
stream alerts. I've already tried the ExecAlarmCallback plugin but I 
couldn't get it working with the new version.

Thanks

 - Ryan

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Temporal Drools

[Jeff Deville]

The drools samples appears to be simple message alterations.  I was 
wondering if anyone had manage to implement any sophisticated drools 
processes with graylog, and if so, perhaps any pointers you might have on 
how to get started.  I just spent an hour and a half (unsuccessfully) 
trying to get mvn to build the project just to add some more logging around 
the drools initialization process, and figured it might be wise to see if 
this was at all possible.

Also...  if anyone has any pointers on the build, that'd be great.  I've 
installed the custom syslog, and then tried:
make

[ERROR] Failed to execute goal on project graylog2-parent: Could not 
resolve dependencies for project 
org.graylog2:graylog2-parent:pom:0.20.0-rc.2: Failure to find 
org.productivity.java:syslog4j-graylog2:jar:0.9.48-graylog2 in 
http://repo.maven.apache.org/maven2 was cached in the local repository, 
resolution will not be reattempted until the update interval of central has 
elapsed or updates are forced -> [Help 1]


ls ~/.m2/repository/org/productivity/java/syslog4j-graylog2/0.9.48-graylog2
_remote.repositories  syslog4j-graylog2-0.9.48-graylog2.jar 
syslog4j-graylog2-0.9.48-graylog2.pom 


 
mvn assembly:assembly

java.io.IOException: Un-terminated quoted field at end of CSV line
at au.com.bytecode.opencsv.CSVParser.parseLine(CSVParser.java:268)
at au.com.bytecode.opencsv.CSVParser.parseLine(CSVParser.java:178)
at org.graylog2.inputs.converters.CsvConverter.convert(CsvConverter.java:74)
at 
org.graylog2.inputs.converters.CsvConverterTest.testEdgeCases(CsvConverterTest.java:77)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at 
org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:80)
at org.testng.internal.Invoker.invokeMethod(Invoker.java:673)
at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:842)
at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1166)
at 
org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:125)
at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:109)
at org.testng.TestRunner.runWorkers(TestRunner.java:1178)
at org.testng.TestRunner.privateRun(TestRunner.java:757)
at org.testng.TestRunner.run(TestRunner.java:608)
at org.testng.SuiteRunner.runTest(SuiteRunner.java:334)
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:329)
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:291)
at org.testng.SuiteRunner.run(SuiteRunner.java:240)
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1158)
at org.testng.TestNG.runSuitesLocally(TestNG.java:1083)
at org.testng.TestNG.run(TestNG.java:999)
at 
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:77)
at 
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.executeMulti(TestNGDirectoryTestSuite.java:189)
at 
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:105)
at 
org.apache.maven.surefire.testng.TestNGProvider.invoke(TestNGProvider.java:117)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at 
org.apache.maven.surefire.util.ReflectionUtils.invokeMethodWithArray2(ReflectionUtils.java:208)
at 
org.apache.maven.surefire.booter.ProviderFactory$ProviderProxy.invoke(ProviderFactory.java:158)
at 
org.apache.maven.surefire.booter.ProviderFactory.invokeProvider(ProviderFactory.java:86)
at 
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:153)
at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:95)
Tests run: 235, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 2.94 sec


build_script/build_server_release.sh 123

---
 T E S T S
---
Running TestSuite
Configuring TestNG with: TestNGMapConfigurator
2014-02-10 22:23:53,709 ERROR: org.graylog2.Configuration - Malformed 
mongodb_replica_set configuration.
2014-02-10 22:23:54,609 ERROR: org.graylog2.inputs.converters.CsvConverter 
- Different number of columns in CSV data (1) and configured field names 
(2). Discarding input.
2014-02-10 22:23:54,609 ERROR: org.graylog2.inputs.converters.CsvConverter 
- Different number of columns in CSV data (3) and configured field names 
(2). Discarding input.
2014-02-10 22:23:54,609 ERROR: org.graylog2.inputs.converters.CsvConverter 
- Invalid CSV in

[graylog2] Graylog2 installation on Ubuntu ( ESXi VM)

[Venkatesh V]

Hello,

I am planning to build new graylog2 server for our environment.Could you 
please someone provide the recommendations and installation instructions? 

OS:Ubuntu
ESXi Virtual Server
Hardware:DELL R620
CPU :2
RAM:4
Hard disk: 60GB thin

Thanks,
Venkatesh.

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Re: [ANNOUNCE] Graylog2 v0.20.0-rc.2 has been released

[Scotty H]

Working well so far, Thank you.

On Monday, February 10, 2014 1:33:24 PM UTC-5, lennart wrote:
>
> Hey everybody, 
>
> we just released the second RC version of Graylog2 v0.20.0. It brings 
> a lot of fixes and improvements - Find a complete list in the 
> announcement: 
>
> * http://blog.torch.sh/graylog2-v0-20-0-rc-2-has-been-released/ 
>
> Have a great day, 
> Lennart (on behalf of the whole TORCH team) 
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [graylog2] Re: GELF & multiline-Logs

[Lennart Koopmann]

Hey Cornelius,

you are right, that was a bug. :) Kay already fixed it and we'll
release RC.3 tomorrow:
https://github.com/Graylog2/graylog2-web-interface/issues/612

Thank you very much,
Lennart

On Tue, Feb 11, 2014 at 3:18 PM,   wrote:
> Hi Kay,
>
> ok, I'm sorry, this work for me as expected, great!
> I think I have to be more precise: the line-breaks are displayed within the
> small message window on the right side, but not when displaying the message
> in Full-Screen-Mode. Would it be possible to have the same behaviour there?
> Thank you!
>
> Bye, Cornelius
>
>
>
>
> On Tuesday, February 11, 2014 10:29:31 AM UTC+1, Kay Röpke wrote:
>>
>> cc'ing mailing list.
>>
>> I just tested this and it works as expected for me.
>> Could you please share an example message?
>>
>> Just to make sure you are also running the RC2 of the web interface,
>> right? Because the bug was there and not in the server.
>>
>> I sent:
>>
>> curl -0 -XPOST http://localhost:12202/gelf -d
>> '{"short_message":"ohai", "full_message":"this
>> is
>> a
>> test
>> ", "host":"localhost", "facility":"test"}'
>>
>> to my HTTP GELF input and it showed up as I expected (this is running RC2
>> here).
>>
>> Best,
>> Kay
>>
>> On Mon, Feb 10, 2014 at 9:54 PM,   wrote:
>> > Hi Kai, hi Lennart,
>> >
>> > I've just downloaded und installed RC2. The Update worked out of the
>> > box, I
>> > played a little with the new version, again an improvement - e.g.
>> > alerting
>> > now works!
>> > But unfortunately multiline-Line-Breaks still don't work for me :-(
>> > The GELF-Event contains them, but within the web-interface there are
>> > still
>> > no line-breaks :-(
>> >
>> > Ciao, Cornelius
>> >
>> >
>> >
>> > On Wednesday, February 5, 2014 3:12:38 PM UTC+1, Kay Röpke wrote:
>> >>
>> >> This will be fixed in RC2.
>> >>
>> >> Thanks for your report!
>> >>
>> >>
>> >> On Wed, Feb 5, 2014 at 10:56 AM, Lennart Koopmann 
>> >> wrote:
>> >>>
>> >>> Thanks for reporting this! Please follow this issue:
>> >>> https://github.com/Graylog2/graylog2-web-interface/issues/601
>> >>>
>> >>> Cheers,
>> >>> Lennart
>> >>>
>> >>> On Tue, Feb 4, 2014 at 7:44 PM, Grégory Nuyttens
>> >>>  wrote:
>> >>> > At this time, I try a lot of thing:
>> >>> >
>> >>> > - simple messages with gelf and with an "\n" character inside my
>> >>> > message
>> >>> > - with logstash and multiline option
>> >>> >
>> >>> > but in the graylog web interface I only show a "blank" between
>> >>> > multiple
>> >>> > lines and no multiline display :-/
>> >>> >
>> >>> > I think you told about this issue:
>> >>> > https://github.com/Graylog2/graylog2-web-interface/pull/126, it
>> >>> > seems
>> >>> > to be
>> >>> > closed and resolved but the problem is come back in this version???
>> >>> >
>> >>> > Thanks if anyone have a solution or we can create again a new
>> >>> > issue
>> >>> > about this problem
>> >>> >
>> >>> >
>> >>> >
>> >>> > On Tuesday, January 28, 2014 4:24:40 PM UTC+1, corneli...@gmail.com
>> >>> > wrote:
>> >>> >>
>> >>> >> Hi,
>> >>> >>
>> >>> >> first of all I want to say that I'm quite satisfied with graylog2
>> >>> >> 0.2.0
>> >>> >> rc.1-1.
>> >>> >> But I have a question regarding multiline-Display within
>> >>> >> "full_message".
>> >>> >> Although line-breaks, i.e. \n are included within the GELF-Message
>> >>> >> from
>> >>> >> logstash, e.g. Stacktraces are displayed as floating text.
>> >>> >> I read that there was an Issue 9 months ago, but that should be
>> >>> >> fixed.
>> >>> >> Is
>> >>> >> the same problem re-occuring? Or am I missing something?
>> >>> >>
>> >>> >> Regards, Cornelius
>> >>> >>
>> >>> > --
>> >>> > You received this message because you are subscribed to the Google
>> >>> > Groups
>> >>> > "graylog2" group.
>> >>> > To unsubscribe from this group and stop receiving emails from it,
>> >>> > send
>> >>> > an
>> >>> > email to graylog2+u...@googlegroups.com.
>> >>>
>> >>> > For more options, visit https://groups.google.com/groups/opt_out.
>> >>>
>> >>> --
>> >>> You received this message because you are subscribed to the Google
>> >>> Groups
>> >>> "graylog2" group.
>> >>> To unsubscribe from this group and stop receiving emails from it, send
>> >>> an
>> >>> email to graylog2+u...@googlegroups.com.
>> >>>
>> >>> For more options, visit https://groups.google.com/groups/opt_out.
>> >>
>> >>
>> >
>
> --
> You received this message because you are subscribed to the Google Groups
> "graylog2" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [graylog2] Re: GELF & multiline-Logs

[cornelius . rolf]

Hi Kay,

ok, I'm sorry, this work for me as expected, great!
I think I have to be more precise: the line-breaks are displayed within the 
small message window on the right side, but not when displaying the message 
in Full-Screen-Mode. Would it be possible to have the same behaviour there?
Thank you!

Bye, Cornelius



On Tuesday, February 11, 2014 10:29:31 AM UTC+1, Kay Röpke wrote:
>
> cc'ing mailing list. 
>
> I just tested this and it works as expected for me. 
> Could you please share an example message? 
>
> Just to make sure you are also running the RC2 of the web interface, 
> right? Because the bug was there and not in the server. 
>
> I sent: 
>
> curl -0 -XPOST http://localhost:12202/gelf -d 
> '{"short_message":"ohai", "full_message":"this 
> is 
> a 
> test 
> ", "host":"localhost", "facility":"test"}' 
>
> to my HTTP GELF input and it showed up as I expected (this is running RC2 
> here). 
>
> Best, 
> Kay 
>
> On Mon, Feb 10, 2014 at 9:54 PM,  > 
> wrote: 
> > Hi Kai, hi Lennart, 
> > 
> > I've just downloaded und installed RC2. The Update worked out of the 
> box, I 
> > played a little with the new version, again an improvement - e.g. 
> alerting 
> > now works! 
> > But unfortunately multiline-Line-Breaks still don't work for me :-( 
> > The GELF-Event contains them, but within the web-interface there are 
> still 
> > no line-breaks :-( 
> > 
> > Ciao, Cornelius 
> > 
> > 
> > 
> > On Wednesday, February 5, 2014 3:12:38 PM UTC+1, Kay Röpke wrote: 
> >> 
> >> This will be fixed in RC2. 
> >> 
> >> Thanks for your report! 
> >> 
> >> 
> >> On Wed, Feb 5, 2014 at 10:56 AM, Lennart Koopmann  
> wrote: 
> >>> 
> >>> Thanks for reporting this! Please follow this issue: 
> >>> https://github.com/Graylog2/graylog2-web-interface/issues/601 
> >>> 
> >>> Cheers, 
> >>> Lennart 
> >>> 
> >>> On Tue, Feb 4, 2014 at 7:44 PM, Grégory Nuyttens 
> >>>  wrote: 
> >>> > At this time, I try a lot of thing: 
> >>> > 
> >>> > - simple messages with gelf and with an "\n" character inside my 
> >>> > message 
> >>> > - with logstash and multiline option 
> >>> > 
> >>> > but in the graylog web interface I only show a "blank" between 
> multiple 
> >>> > lines and no multiline display :-/ 
> >>> > 
> >>> > I think you told about this issue: 
> >>> > https://github.com/Graylog2/graylog2-web-interface/pull/126, it 
> seems 
> >>> > to be 
> >>> > closed and resolved but the problem is come back in this version??? 
> >>> > 
> >>> > Thanks if anyone have a solution or we can create again a new 
> issue 
> >>> > about this problem 
> >>> > 
> >>> > 
> >>> > 
> >>> > On Tuesday, January 28, 2014 4:24:40 PM UTC+1, corneli...@gmail.com 
> >>> > wrote: 
> >>> >> 
> >>> >> Hi, 
> >>> >> 
> >>> >> first of all I want to say that I'm quite satisfied with graylog2 
> >>> >> 0.2.0 
> >>> >> rc.1-1. 
> >>> >> But I have a question regarding multiline-Display within 
> >>> >> "full_message". 
> >>> >> Although line-breaks, i.e. \n are included within the GELF-Message 
> >>> >> from 
> >>> >> logstash, e.g. Stacktraces are displayed as floating text. 
> >>> >> I read that there was an Issue 9 months ago, but that should be 
> fixed. 
> >>> >> Is 
> >>> >> the same problem re-occuring? Or am I missing something? 
> >>> >> 
> >>> >> Regards, Cornelius 
> >>> >> 
> >>> > -- 
> >>> > You received this message because you are subscribed to the Google 
> >>> > Groups 
> >>> > "graylog2" group. 
> >>> > To unsubscribe from this group and stop receiving emails from it, 
> send 
> >>> > an 
> >>> > email to graylog2+u...@googlegroups.com. 
> >>> 
> >>> > For more options, visit https://groups.google.com/groups/opt_out. 
> >>> 
> >>> -- 
> >>> You received this message because you are subscribed to the Google 
> Groups 
> >>> "graylog2" group. 
> >>> To unsubscribe from this group and stop receiving emails from it, send 
> an 
> >>> email to graylog2+u...@googlegroups.com. 
> >>> 
> >>> For more options, visit https://groups.google.com/groups/opt_out. 
> >> 
> >> 
> > 
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Features suggestions

[GambitK]

I was in the irc chat and was talking there about some features I think 
would be really great for graylog2. Here are the links to the issues I 
created so some of you that only check this group can read them and give 
your opinions.

https://github.com/Graylog2/graylog2-server/issues/424

https://github.com/Graylog2/graylog2-web-interface/issues/613

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Re: rc-1.1 'streams' page white pages with no errors

[sealclubber255]

So I got it working by stopping everything (except mongo) running these 
commands:

mongo // To go to shell

show databases // To show all existing databases.

use  // To switch to the wanted database.

db.dropDatabase() // To remove the current database.

Followed by restarting everything in order. I can now see streams! Thanks all :)



On Tuesday, February 4, 2014 1:46:49 PM UTC-5, John Doe wrote:
>
> hello all. 
>
> i have a fresh install of rc-1.1, es 0.90.10, and mongo 2.4.9. all of the 
> web interface works except for 'streams' which just whitepages and doesnt 
> log any errors. Can someone point me in the right direction to troubleshoot 
> this?
>

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] v0.20.0-rc.2: Incorrect Indices count

[Joe Vandermark]

.. in system-> Indices the count of active indices is incorrect.

  0 indices with a total of 15,264 messages under management.

-Joe

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Re: Graylog2 v0.20.0-preview.2 - Installation problems

[Wiley Sanders]

In graylog-server-0.20.0.-rc.2 multicast discovery  is disabled by default 
and the unicast elasticserach host is set to "192.168.1.203:9200".

It's probably more appropriate to enable multicast but even more 
appropriate to set the unicast hosts to whatever you need (like 127.0.0.1 
if you are installing a single elasticsearch node on the same host.)

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Blacklists

[Tim]

Have been using Graylog 0.12 for a while

Just been looking at the new 0.20 release candidate and cannot find any 
sign of where to configure blacklists 

Has this feature been removed from graylog? 

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: [graylog2] Blacklists

[Lennart Koopmann]

Hey Tim,

the blacklists were not re-implemented for 0.20.0 yet, but will come
back in a way better implementation in a near-future version.

Sorry for the inconvenience.

Thanks,
Lennart

On Tue, Feb 11, 2014 at 5:10 PM, Tim  wrote:
> Have been using Graylog 0.12 for a while
>
> Just been looking at the new 0.20 release candidate and cannot find any sign
> of where to configure blacklists
>
> Has this feature been removed from graylog?
>
> --
> You received this message because you are subscribed to the Google Groups
> "graylog2" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] No search permissions for non-admin users in 0.20.0-rc2?

[Wiley Sanders]

I
 
just installed 0.20.0-rc2 and non-admin ("reader") users can't use the 
search page, click on image to the Left, (?? - Groups may put this image in 
some random location on this page).

Is Graylog2 supposed to work this way? I can give non-admin users access to 
"Everything" for Streams and Dashboards but I see no options for Search.

It seems as though everyone should at least be able to search, somehow.


Thanks,

-w

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Re: No search permissions for non-admin users in 0.20.0-rc2?

[Wiley Sanders]

In addition it appears assigning Admin privileges to existing users is also 
broken. Well, that is a show stopper. I was also hoping to use the latest 
version with LDAP. Any workarounds?

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Re: No search permissions for non-admin users in 0.20.0-rc2?

[Wiley Sanders]

I also thought at first that assigning admin privileges to existing users 
was broken. FWIW one needs to click on "Reset Permissions" rather than 
"Save Changes" after checking the "Assign administrator permissions" box. 

Perhaps move the "Save Changes" button to the bottom of the page and have 
it save everything on the page?

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[graylog2] Dashboard Widgets are Blank

[Wiley Sanders]

It seems that Widgets aren't working in my install of 0.20.0-rc.2 either. 
This dashboard was created by the admin user, from a search "Total result 
histogram" that displays just fine on the Search page. The widgets are 
blank for admin as well as all other users. Each time I refresh the page I 
get the exception pasted in below. Is this possibly related to running 
graylog2 and graylog2-web-interface as root (I am just testing, I was 
planning on setting up with non-root users later.)

2014-02-11 17:08:00,486 ERROR: 
org.graylog2.plugin.rest.AnyExceptionClassMapper - Unhandled exception in 
REST resource
com.google.common.util.concurrent.UncheckedExecutionException: 
org.elasticsearch.action.search.SearchPhaseExecutionException: Failed to 
execute phase [query], all shards failed; shardFailures 
{[NdYBuihmRJWpyXUjoVW1ZQ][graylog2_0][2]: 
RemoteTransportException[[Giant-Man][inet[/172.16.36.66:9300]][search/phase/query]];
 
nested: SearchParseException[[graylog2_0][2]: from[-1],size[-1]: Parse 
Failure [Failed to parse source 
[{"query":{"query_string":{"query":"","allow_leading_wildcard":false}},"facets":{"histogram":{"date_histogram":{"field":"timestamp","interval":"minute"},"facet_filter":{"bool":{"must":{"range":{"timestamp":{"from":"2014-02-12
 
00:08:00.475","to":"2014-02-12 
01:08:00.475","include_lower":true,"include_upper":true]]]; nested: 
QueryParsingException[[graylog2_0] Failed to parse query []]; nested: 
ParseException[Cannot parse '': Encountered "" at line 1, column 0.
Was expecting one of:
 ...
"+" ...
"-" ...
 ...
"(" ...
"*" ...
 ...
 ...
 ...
 ...
 ...
"[" ...
"{" ...
 ...
 ...
"*" ...
]; nested: ParseException[Encountered "" at line 1, column 0.
Was expecting one of:
 ...
"+" ...
"-" ...
 ...
"(" ...
"*" ...
 ...
 ...
 ...
 ...
 ...
"[" ...
"{" ...
 ...
 ...
"*" ...
]; }{[NdYBuihmRJWpyXUjoVW1ZQ][graylog2_0][0]: 
RemoteTransportException[[Giant-Man][inet[/172.16.36.66:9300]][search/phase/query]];
 
nested: SearchParseException[[graylog2_0][0]: from[-1],size[-1]: Parse 
Failure [Failed to parse source 
[{"query":{"query_string":{"query":"","allow_leading_wildcard":false}},"facets":{"histogram":{"date_histogram":{"field":"timestamp","interval":"minute"},"facet_filter":{"bool":{"must":{"range":{"timestamp":{"from":"2014-02-12
 
00:08:00.475","to":"2014-02-12 
01:08:00.475","include_lower":true,"include_upper":true]]]; nested: 
QueryParsingException[[graylog2_0] Failed to parse query []]; nested: 
ParseException[Cannot parse '': Encountered "" at line 1, column 0.
Was expecting one of:
 ...
"+" ...
"-" ...
 ...
"(" ...
"*" ...
 ...
 ...
 ...
 ...
 ...
"[" ...
"{" ...
 ...
 ...
"*" ...
]; nested: ParseException[Encountered "" at line 1, column 0.
Was expecting one of:
 ...
"+" ...
"-" ...
 ...
"(" ...
"*" ...
 ...
 ...
 ...
 ...
 ...
"[" ...
"{" ...
 ...
 ...
"*" ...
]; }{[NdYBuihmRJWpyXUjoVW1ZQ][graylog2_0][3]: 
RemoteTransportException[[Giant-Man][inet[/172.16.36.66:9300]][search/phase/query]];
 
nested: SearchParseException[[graylog2_0][3]: from[-1],size[-1]: Parse 
Failure [Failed to parse source 
[{"query":{"query_string":{"query":"","allow_leading_wildcard":false}},"facets":{"histogram":{"date_histogram":{"field":"timestamp","interval":"minute"},"facet_filter":{"bool":{"must":{"range":{"timestamp":{"from":"2014-02-12
 
00:08:00.475","to":"2014-02-12 
01:08:00.475","include_lower":true,"include_upper":true]]]; nested: 
QueryParsingException[[graylog2_0] Failed to parse query []]; nested: 
ParseException[Cannot parse '': Encountered "" at line 1, column 0.
Was expecting one of:
 ...
"+" ...
"-" ...
 ...
"(" ...
"*" ...
 ...
 ...
 ...
 ...
 ...
"[" ...
"{" ...
 ...
 ...
"*" ...
]; nested: ParseException[Encountered "" at line 1, column 0.
Was expecting one of:
 ...
"+" ...
"-" ...
 ...
"(" ...
"*" ...
 ...
 ...
 ...
 ...
 ...
"[" ...
"{" ...
 ...
 ...
"*" ...
]; }{[NdYBuihmRJWpyXUjoVW1ZQ][graylog2_0][1]: 
RemoteTransportException[[Giant-Man][inet[/172.16.36.66:9300]][search/phase/query]];
 
nested: SearchParseException[[graylog2_0][1]: from[-1],size[-1]: Parse 
Failure [Failed to parse source 
[{"query":{"query_string":{"query":"","allow_leading_wildcard":false}},"facets":{"histogram":{"date_histogram":{"field":"timestamp","interval":"minute"},"facet_filter":{"bool":{"must":{"range":{"timestamp":{"from":"2014-02-12
 
00:08:00.475","to":"2014-02-12 
01:08:00.475","include_lower":true,"include_upper":true]]]; nested: 
QueryParsingException[[graylog2_0]