Re: [graylog2] Re: Graylog Does not work on AWS

[Jan Doberstein]

Hej,


On 4. Juli 2016 at 20:00:26, 123Dev (hr...@123loadboard.com) wrote:
> First and foremost, that statement was not meant as a knock on Graylog
> documentation, in fact I'm impressed how fast and frequent the docs are
> updated and kept current.

thank you for this, i will forward it to the dev team!

> Given all the configuration / distribution varieties, it is a
> understandably impossible to have flawless documentation.
> Seriously you guys have been amazing with the development and documentation
> Graylog.

we try to improve not only the product, the surroundings are important as well.

> Having said that, we ourselves still struggle getting the REST API part of
> the setup working correctly, even after experimenting lots of configuration
> options and reading many forum / issue tickets.

that is why we will do a change here in the next release. if
everything is working as we had planed the next version should easy
that up.

— spoiler -

all components use the same port and routing is done by url

- spoiler -

after this is ready we will work on the documentation and try to cover
aws production setups too.

but it would be helpful if you submit your findings as issues or even
better as pull request for the documentation

https://github.com/Graylog2/documentation

thank you
jan

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAGm-bLbMJkumdexmseo1jpVZy__nCQ-gC9s88h8UjBBNB2OEdA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Graylog Does not work on AWS

[123Dev]

Hi Jan,

First and foremost, that statement was not meant as a knock on Graylog 
documentation, in fact I'm impressed how fast and frequent the docs are 
updated and kept current.
Given all the configuration / distribution varieties, it is a 
understandably impossible to have flawless documentation.
Seriously you guys have been amazing with the development and documentation 
Graylog.

Having said that, we ourselves still struggle getting the REST API part of 
the setup working correctly, even after experimenting lots of configuration 
options and reading many forum / issue tickets.

Some examples.
https://groups.google.com/forum/#!topic/graylog2/2FmvMohU45Q

As you can see our comments in that ticket, REST API calls are over HTTP 
and not HTTPS even though they are configured to be over HTTPS (nginx)
Furthermore the graylog TLS settings are not applicable for AWS image as 
stated by Jochen.

We are also hit by this issue
https://github.com/Graylog2/graylog2-server/issues/2179
https://github.com/Graylog2/graylog2-server/issues/2288
Which if you google, you'd get many many hits.
Our logs are flooded by this
org.graylog2.shared.rest.resources.ProxiedResource - Unable to call 
http://10.20.1.229:12900/system/metrics/multiple 
on node <5ac...>, caught exception: timeout (class 
java.net.SocketTimeoutException)

Considering that against our wishes, API calls are over HTTP, PKI cert 
being the issue is not applicable.

Thanks



On Friday, July 1, 2016 at 5:40:11 AM UTC-4, Jan Doberstein wrote:
>
> Hej 
>
>
> On 30. Juni 2016 at 16:09:28, 123Dev (hr...@123loadboard.com ) 
> wrote: 
> > REST API access part is a bit flaky and I agree it can benefit from 
> better 
> > documentation / code, but Graylog folks have always been proactive and I 
> > constantly see doc and code updates. 
>
> could you please give us a hint what part of the documentation could be 
> better? 
>
> Only if we see caveats we can work on them 
>
> Thank you 
> Jan 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/354236e0-1e20-4b4a-83f7-15b223961529%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Graylog Does not work on AWS

[Jan Doberstein]

Hej


On 30. Juni 2016 at 16:09:28, 123Dev (hr...@123loadboard.com) wrote:
> REST API access part is a bit flaky and I agree it can benefit from better
> documentation / code, but Graylog folks have always been proactive and I
> constantly see doc and code updates.

could you please give us a hint what part of the documentation could be better?

Only if we see caveats we can work on them

Thank you
Jan

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAGm-bLZWJKgbLW5Z40zjgigLQOoqKjPzqqq30r0Okshh0s8qRA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Graylog Does not work on AWS

[123Dev]

That is not true,
We have AWS image based deployment (2 graylog servers, 2 datanodes) 
(production) and one manual install (staging) all working in AWS.

REST API access part is a bit flaky and I agree it can benefit from better 
documentation / code, but Graylog folks have always been proactive and I 
constantly see doc and code updates.

If it helps you in any way, we have all Graylogs deployed in private 
subnets, and have ELB front serving (https) it publicly.
All our Graylog inputs are only accessible privately by design.

Good luck
 

On Thursday, June 30, 2016 at 5:05:18 AM UTC-4, Joshua Swanson wrote:
>
> Turns out though, that I can't - apparently one of the changes since 1.0.1 
> has made it unable to run on AWS.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a1e480f3-68b4-4802-967f-c7b18524936f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Graylog Does not work on AWS

[Joshua Swanson]

The nginx file. I tried setting up two servers, one according to this:
http://docs.graylog.org/en/2.0/pages/installation/os/centos.html
and one according to this:
http://docs.graylog.org/en/2.0/pages/installation/aws.html

The first one, does not have nginx, but it does have rest_listen_uri,
rest_transport_uri, web_listen_uri, and web_endpoint_uri in the graylog
conf file at /etc/graylog/server/server.conf
the second one does have the file, but both of them have the same problem.

I have been using graylog2 version 1.0.1 for the past couple of years, but
recently decided it was time to upgrade. When attempting an actual upgrade
failed, I decided that I should try setting up a new server, entirely from
scratch, with the assumption that if I followed the setup instructions in
the official documentation exactly as written I would be able to get it
working. Turns out though, that I can't - apparently one of the changes
since 1.0.1 has made it unable to run on AWS.


On 29 June 2016 at 15:03, 123Dev  wrote:

> The server that I set up, does not have that file.
>
> Which file are you referring to?
> nginx.conf or graylog.conf?
>
> Yet you mention the setting, so where are you reading this setting?
> How did you setup the Graylog server? from an AWS image?
> then you should have the file.
>
> If this is your first experience with Graylog, why not start with AWS
> image?
>
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Graylog Users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/graylog2/87wfHI5nqwg/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/be6c8ef4-d7f7-4a38-8ede-8c531173a3b1%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAG_VMMf%2BAJvAP6qgG4F6Bh9BfnzxKc5UGPw1DkiHN499LT%2BECg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.