[graylog2] Re: Alerts not getting triggered Graylog v2.0.1

2017-01-24 Thread Rakesh R
Have upgraded graylog to latest version, still facing the same issue, the 
alerts just stop being triggered. Every time the server has to be restarted 
to make the graylog server trigger alerts. What could be the issue ?

thanks

On Tuesday, October 18, 2016 at 12:18:48 AM UTC+5:30, Rakesh R wrote:
>
> Hi Justin,
>   Thanks for the reply. I will try debugging more regarding this issue.
>
> On Thursday, October 6, 2016 at 11:12:16 PM UTC+5:30, Justin Hildreth 
> wrote:
>>
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/545f0677-441c-40f6-bfd9-2f91a121cfcb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Alerts not getting triggered Graylog v2.0.1

2016-10-17 Thread Rakesh R
Hi Justin,
  Thanks for the reply. I will try debugging more regarding this issue.

On Thursday, October 6, 2016 at 11:12:16 PM UTC+5:30, Justin Hildreth wrote:
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/2009d1f2-d89a-4253-849c-0f53ef189839%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Alerts not getting triggered Graylog v2.0.1

2016-10-06 Thread Rakesh R
I have also upgraded the graylog to 2.1.1 and still facing the same issue

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/18839275-9191-48fc-9fb6-3c950d720986%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Graylog SSO not working.

2016-10-06 Thread Rakesh R
Hi,

   There is some problem with the graylog SSO plugin.( After installing the 
SSO plugin https://github.com/Graylog2/graylog-plugin-auth-sso. )
Im using Nginx , Here's the part of the config used and the user and the 
email are correct (checked the logs of nginx). The data to nginx is coming 
from the oauth proxy where -pass-basic-auth=true  is set.
 
  proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_headerHost $http_host;
  proxy_set_headerX-Forwarded-Server $host;
  proxy_set_headerX-Forwarded-User $http_x_forwarded_user;
  proxy_set_headerX-Forwarded-Email $http_x_forwarded_email;

When the same is used in the configuration at the UI, 
X-Forwarded-User for the Header configuration, put the correct domain name 
and saved it. However, it gives authentication error when I try the same. 
Can some one help me?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/5e536c91-f3e0-4c8a-a261-51a321c41ad5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Alerts not getting triggered Graylog v2.0.1

2016-10-06 Thread Rakesh R
Hello, did any one find a solution to this?

On Thursday, June 23, 2016 at 6:47:14 PM UTC+5:30, Justin Hildreth wrote:
>
> Ah, bummer that it came to that. I suppose that works though. :) Thanks 
> for the update!
>
> On Thursday, June 23, 2016 at 9:15:24 AM UTC-4, Rakesh R wrote:
>>
>> I could not find any solution for this. So I have created a job that 
>> restarts graylog server every one hour
>>
>> On Monday, May 30, 2016 at 2:12:44 PM UTC+5:30, Rakesh R wrote:
>>>
>>> Hi, 
>>>
>>>   Graylog is setup properly and there seems to be some issue with the 
>>> alerts being triggered. Test mails are working fine. The alerts are 
>>> triggered from the streams when the server is restarted and after some time 
>>> the alerts are not triggered. I have checked the configuration and 
>>> everything is fine. Can some one help me. 
>>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/2ad2afae-9a61-450c-8d1a-35c98e0795d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Alerts not getting triggered Graylog v2.0.1

2016-06-23 Thread Rakesh R
I could not find any solution for this. So I have created a job that 
restarts graylog server every one hour

On Monday, May 30, 2016 at 2:12:44 PM UTC+5:30, Rakesh R wrote:
>
> Hi, 
>
>   Graylog is setup properly and there seems to be some issue with the 
> alerts being triggered. Test mails are working fine. The alerts are 
> triggered from the streams when the server is restarted and after some time 
> the alerts are not triggered. I have checked the configuration and 
> everything is fine. Can some one help me. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/47f1a887-775b-43ff-abfa-a6181eca289b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Re: Alerts not getting triggered Graylog v2.0.1

2016-06-02 Thread Rakesh R
Hi,
 Here are few rules from different streams

 *message* must match regular expression *RuntimeException: No Elastic 
Search server found for partner *
 *full_message* must match exactly *"Cannot find"  *

   - *message* must match regular expression 
   *java.util.concurrent.TimeoutException*
   - <https://prod-logs.sprinklr.com/streams/55074e9ee4b09422e47e9c6b/edit#>
 <https://prod-logs.sprinklr.com/streams/55074e9ee4b09422e47e9c6b/edit#>  
*message* must match regular expression 
   *InboundMessageInformationLoader*

Sample Alert condition

   - *Alert is triggered when there are more than 0 messages in the last 10 
   minutes. Grace period: 0 minutes. Not including any messages in alert 
   notification.*


These alerts are being triggered , but only for some time like for a few 
hours. After that the alerts wont be triggered and there are no errors in 
graylog server's logs. 
once the graylog server is restarted the alerts are triggered again. And 
after some time they stop and should be restarted again.
 
Sample Alert condition
On Monday, May 30, 2016 at 2:12:44 PM UTC+5:30, Rakesh R wrote:
>
> Hi, 
>
>   Graylog is setup properly and there seems to be some issue with the 
> alerts being triggered. Test mails are working fine. The alerts are 
> triggered from the streams when the server is restarted and after some time 
> the alerts are not triggered. I have checked the configuration and 
> everything is fine. Can some one help me. 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/e3cc14ef-0b52-46fa-9408-a7cd8bcbd60e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[graylog2] Alerts not getting triggered Graylog v2.0.1

2016-05-30 Thread Rakesh R
 

Hi, 

  Graylog is setup properly and there seems to be some issue with the 
alerts being triggered. Test mails are working fine. The alerts are 
triggered from the streams when the server is restarted and after some time 
the alerts are not triggered. I have checked the configuration and 
everything is fine. Can some one help me. 

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/29c9cc67-b670-4034-abf4-c416c0bbb594%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.