[graylog2] Searching "Last Hour" returns no results

Hey Team, Running into a strange issue with my Graylog2 setup. Search for anything with "last hour" returns no results. I can duplicate the same exact search with "last day" and see messages from within the last few seconds. Only searches with the "last hour" tag are returning nothing. v92

[graylog2] Re: event correlation in graylog2

I know it is little bit late, but I had a similar requirement and solved in this way: 1. related events occur relative short after each other (i.e. minutes, seconds) I created a filter plugin for drools and set up a drools fusion rule. The facts for the rule were cached in memory. I set the pri

[graylog2] [PLUGIN] Sample or documentation for PluginRestResource

Hi, I cannot find any hints on how to implement a RESTRESOURCE Plugin.The actual interface PluginRestResource is empty and does not show on how te implement such a plugin. Also I cannot find any samples in the Graylog2 server code. Any help is highly appreciated! Regards, Ronald -- You receive

[graylog2] [PLUGIN] Is it possible to reload (filter) plugins or change their configuration at runtime without restart the node

Hi, I have some questions about FILTER plugin configurations (and plugin configurations in general). Is it possible to change the configuration of a plugin at runtime? As filter plugins do no have a UI at all, they can only have a 1. static configuration or 2. fetch the configuration on thei

[graylog2] activemq

Hi, Trying to set up a radio-node via activemq/amqp but no success. Is it possible? Via rabbitmq it's OK. All graylog2 v0.92.4. /C -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, s

[graylog2] [PLUGIN] Is it possible to create a new message on the fly inside a (filter) plugin

Hi, I am currently testing custom plugins for message correlation. I know I can send new messages via some of the OUTPUT plugins, but sometimes I would like to generate a new message while the orginal message is still in processing. Eg. I have an INPUT or FILTER plugin and depending on the inpu

[graylog2] ERROR [ExtractorFilter] Could not apply extractor

Hi, I have a graylog 0.92.4 server and sometimes i get the following error in /var/log/graylog2-server/server.log: ERROR [ExtractorFilter] Could not apply extractor. java.lang.ArrayIndexOutOfBoundsException. I have enabled the "dead letters" feature but for this case i get no infor

Re: [graylog2] VmWare esx 5 log format

> > Hi All, Has anyone found a solution to this yet. I'm having the exact same issue. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@google

[graylog2] Graylog2 problem with syslog udp Input

Hello, I have configured Syslog UDP Input but this Input is still empty. Traffic to 10514 is allowed and devices are sending syslog messages to this server. Can someone help me? Thanks in advance # iptables -t nat -L -n -v Chain PREROUTING (policy ACCEPT 2581 packets, 254K bytes) pkts bytes

Re: [graylog2] Searching "Last Hour" returns no results

Hello Zach, I would start taking a look at the time configuration, specially timezones. Could you verify the time settings in the machines sending logs, and that both your Graylog user's timezone and the messages' timezones are correct? I hope that helps. Regards, Edmundo -- Developer Tel.:

[graylog2] Re: ERROR [ExtractorFilter] Could not apply extractor

Hi Ubay, this was a bug in Graylog2 0.92.4 and earlier and will be fixed in Graylog 1.0.0. The related issue can be found at https://github.com/Graylog2/graylog2-server/issues/896. Cheers, Jochen On Monday, 19 January 2015 11:42:03 UTC+1, Ubay wrote: > > Hi, > > I have a graylog 0.92.4 s

[graylog2] Re: [PLUGIN] Sample or documentation for PluginRestResource

Hi Ronald, unfortunately the documentation on plugins for Graylog and how to write them is still rather sparse (or more precisely almost non-existent). We plan to change this in the near future. In the mean time you can take a look at the Telemetry plugin, which comes with some JAX-RS resource

[graylog2] Re: activemq

Hi, we currently only test the AMQP functionality with RabbitMQ and we're using the RabbitMQ Java client in Graylog to connect to the AMQP message broker. Could you please elaborate on the problems you're facing with ActiveMQ? Cheers, Jochen On Saturday, 17 January 2015 21:46:42 UTC+1, cmu..

[graylog2] Re: Active Directory Authentication

Tom, I know this is an old post but did you ever get this solved? I had the same issue and have resolved it so I'll post the solution here in case it is the same... Essentially the issue for us was with the Active Directory user configured in Graylog2 to bind to the Active Directory. If you us