[graylog2] collector questions

2015-05-27 Thread Arie
I am playing around with the collector. >From a linux machine we are getting data into our test machine, Al-tho data is flat/ one line message. Within windows(2003) we have the following error: C:\collector\bin>graylog-collector.bat run -f c:\collector\config\collector.conf 2015-05-27T13:20:06

[graylog2] Re: collector questions

2015-05-27 Thread Arie
Sorry, I see the typo in my config :-( It is running now On Wednesday, May 27, 2015 at 2:29:31 PM UTC+2, Arie wrote: > > I am playing around with the collector. > > From a linux machine we are getting data into our test machine, Al-tho > data is flat/ one line message. > > Within windows(2003) w

[graylog2] Re: collector questions

2015-05-27 Thread Arie
Okay it is running and sending data to graylog from windows, Now it is only not installing as a service, having the following error. C:\collector\bin>graylog-collector-service.bat install GA Installing service for Graylog Collector Service name: "GA" JAVA_HOME:"C:\Program Files\Java\jre7\" AR

[graylog2] Re: rsyslogd Structured data

2015-05-27 Thread Lily Chadha
Hi, Can you tell me ,is the structured-data related things are sent by syslog API as an argument or these are automatically generated by daemon ? On Saturday, March 7, 2015 at 7:58:53 PM UTC+5:30, Lily Chadha wrote: > Hi, > > i am new to syslog module.i am trying to log STRUCTURED DATA in log

Re: [graylog2] Re: collector questions

2015-05-27 Thread Bernd Ahlers
Arie, thanks for the report. I will try to reproduce the service installation error and come back to you. Bernd Arie [Wed, May 27, 2015 at 07:02:20AM -0700] wrote: >Okay it is running and sending data to graylog from windows, >Now it is only not installing as a service, having the following erro

[graylog2] Re: rsyslogd Structured data

2015-05-27 Thread Jochen Schalanda
Hi Lily, the structured data fields inside the syslog messages should be generated/populated by rsyslog. Cheers, Jochen On Wednesday, 27 May 2015 16:08:24 UTC+2, Lily Chadha wrote: > > Hi, > > Can you tell me ,is the structured-data related things are sent by syslog > API as an argument or th

[graylog2] Alert Configured For < 1 Messages In X Minutes Triggering When The Message Count Is > 0

2015-05-27 Thread Paul Brushwood
I am using Graylog v1.0.0 and have an alert set up like so ... "Alert is triggered when there is less than 1 message in the last 60 minutes. Grace period: 60 minutes. Not including any messages in alert notification." The past couple of days I've gotten a single alert from this stream despite th

Re: [graylog2] Re: collector questions

2015-05-27 Thread Bernd Ahlers
Arie, the following worked for me on Windows 7. C:\collector\bin>graylog-collector-service.bat install GC Installing service for Graylog Collector Service name: "GC" JAVA_HOME:"C:\Program Files\Java\jre7\" ARCH: "x86" WARNING: JAVA_HOME points to a JRE and no

Re: [graylog2] Re: collector questions

2015-05-27 Thread Bernd Ahlers
Arie, can you please check if this script works for you? https://gist.github.com/bernd/d26366422d42154534db Thanks! Bernd Arie [Wed, May 27, 2015 at 07:02:20AM -0700] wrote: >Okay it is running and sending data to graylog from windows, >Now it is only not installing as a service, having the fo

Re: [graylog2] Re: collector questions

2015-05-27 Thread Arie
Tried it but it doe not work. Same result. C:\collector\bin>"Copy of graylog-collector-service.bat" install GA Installing service for Graylog Collector Service name: "GA" JAVA_HOME:"C:\Program Files\Java\jre7\" ARCH: "x86" WARNING: JAVA_HOME points to a JRE and not JDK installation;

Re: [graylog2] Re: collector questions

2015-05-27 Thread Arie
It appears to go wrong at this line: "%PROCRUN%" //IS//%SERVICE_NAME% .. etc. No errors before. Op woensdag 27 mei 2015 22:25:02 UTC+2 schreef Bernd Ahlers: > > Arie, > > can you please check if this script works for you? > > https://gist.github.com/bernd/d26366422d42154534db > > Thanks

[graylog2] grok extractors not working

2015-05-27 Thread Jesse Skrivseth
So I have a collection of Grok patterns, things like: ... # Syslog Dates: Month Day HH:MM:SS SYSLOGTIMESTAMP %{MONTH} +%{MONTHDAY} %{TIME} PROG (?:[\w._/%-]+) SYSLOGPROG %{PROG:program}(?:\[%{POSINT:pid}\])? SYSLOGHOST %{IPORHOST} SYSLOGFACILITY <%{NONNEGINT:facility}.%{NONNEGINT:priority}> HTTPD

[graylog2] Re: rsyslogd Structured data

2015-05-27 Thread Lily Chadha
Hi Jochen, Thanks for your quick reply.Do i need to define these things in some rsyslog source file?Can i get some idea how these value will be generated? Thanks, --Lily On Saturday, March 7, 2015 at 7:58:53 PM UTC+5:30, Lily Chadha wrote: > > Hi, > > i am new to syslog module.i am trying t