[graylog2] Re: Extractor access to multiple fields

2014-08-29 Thread Arie
If your servers are linux with syslog or syslog-ng you could send only http/httpd to graylog2, that tis another way by looking at it if you need http only. On Thursday, August 28, 2014 4:41:58 PM UTC+2, Flávio Pimenta wrote: > > Hi, > > I started a study and implementation graylog2 about 150 seve

Re: [graylog2] Re: [ANNOUNCE] Graylog2 v0.20.6 has been released

2014-08-29 Thread Bernd Ahlers
Hey Cornelius, cornelius.r...@gmail.com [Fri, Aug 29, 2014 at 01:44:20AM -0700] wrote: >is there a way to change the settings for existing Kafka-Inputs? Or do I >have to terminate and create a new Kafka-Input? > that's not possible at the moment. You have to terminate and re-create. >The hint wh

[graylog2] Re: Openstack Services integration Graylog2

2014-08-29 Thread Jochen Schalanda
Am Freitag, 29. August 2014 10:46:50 UTC+2 schrieb mehmet hacısalihoğlu: > > Where can I find sample rsyslog.conf and other configuration files? > Because Openstack has many services and mixed configurations. So, I dont > make this configuration. > Please refer to the Openstack documentation I'v

[graylog2] Re: Openstack Services integration Graylog2

2014-08-29 Thread mehmet hacısalihoğlu
Thanks Jochen. Where can I find sample rsyslog.conf and other configuration files? Because Openstack has many services and mixed configurations. So, I dont make this configuration. Regards. On Wednesday, August 27, 2014 5:00:19 PM UTC+3, Jochen Schalanda wrote: > > Hi! > > Currently there is n

Re: [graylog2] Re: [ANNOUNCE] Graylog2 v0.20.6 has been released

2014-08-29 Thread cornelius . rolf
Hi Bernd, is there a way to change the settings for existing Kafka-Inputs? Or do I have to terminate and create a new Kafka-Input? The hint when creating a Kafka-Input within GUI states Number of processor threads to spawn. Use one thread per Kafka topic partition. I have setup a Kafka-Cluster

Re: [graylog2] Processing of a stream has been disabled due to excessive processing time.

2014-08-29 Thread Dennis Oelkers
Hey Cornelius, On 29.08.2014, at 10:32, cornelius.r...@gmail.com wrote: > Hello, > any 2 or three days I get the following message within graylog2: > > Processing of a stream has been disabled due to excessive processing time. 16 > minutes ago > The processing of stream SVP has taken too long f

[graylog2] Processing of a stream has been disabled due to excessive processing time.

2014-08-29 Thread cornelius . rolf
Hello, any 2 or three days I get the following message within graylog2: Processing of a stream has been disabled due to excessive processing time. 16 minutes ago The processing of stream *SVP* has taken too long for 0 times. To protect the stability of message processing, this stream has been di

[graylog2] Re: Extractor access to multiple fields

2014-08-29 Thread Jochen Schalanda
Hi Flávio, currently there isn't any "conditional" extractor for more complex filtering logic in Graylog2. If you need to apply more complex logic to the message filtering, the most flexible way would be to write some Drools rules, see http://graylog2.org/resources/documentation/general/rewriti