[graylog2] Re: Add Role to Graylog2

2015-07-28 Thread Jochen Schalanda
Hi Tim, user roles will be supported in Graylog 1.2.0. You can follow https://github.com/Graylog2/graylog2-server/pull/1322 if you want to stay up-to-date on the issue. Cheers, Jochen On Tuesday, 28 July 2015 10:07:30 UTC+2, tim lewis wrote: Is there a way to add a new role to Graylog? We

[graylog2] Setting default TTL for new indices

2015-07-28 Thread ZeroUno
Hi, I'm using the following software versions which I'm not allowed to upgrade, on RedHat: graylog2 0.20.1 elasticsearch 0.90.10 Graylog gets messages from logstash. I need to set a default TTL for all incoming messages, but I'm having trouble with this. Most online resources simply

[graylog2] Help with install script

2015-07-28 Thread 'Joe' via graylog2
I am trying to install mongodb, elasticsearch, graylog2 and graylog2-web-interface on one server using Ubuntu 14.04, but I am getting errors such as java does not have enough memory. Ill post my script and hopefully someone can tell me what I am doing wrong and will help someone else down the

[graylog2] Add Role to Graylog2

2015-07-28 Thread tim lewis
Is there a way to add a new role to Graylog? We would like to control access to different groups of users with potentially different sets of permissions/responsibilities and not have to manually add permissions to each account. Does Graylog support this concept? Thank you all for your

[graylog2] TCP Syslog input channel restarting all the time?

2015-07-28 Thread Jason Haar
Hi there I'm using syslog-ng to feed in data via a syslog/TCP channel and it's continually (every 10 seconds) dropping the TCP channel - forcing syslog-ng to restart it 2015-07-29T02:26:31+00:00 syslog.server syslog notice syslog-ng[30512]: Syslog connection broken; fd='408',

[graylog2] Re: Setting default TTL for new indices

2015-07-28 Thread ZeroUno
Il 28/07/15 14:13, Jochen Schalanda ha scritto: you can add your index template to the Elasticsearch configuration file (https://www.elastic.co/guide/en/elasticsearch/reference/0.90/indices-templates.html#config) referenced in the elasticsearch_config_file setting in the Graylog configuration

[graylog2] Re: Setting default TTL for new indices

2015-07-28 Thread Jochen Schalanda
Hi, you can add your index template to the Elasticsearch configuration file ( https://www.elastic.co/guide/en/elasticsearch/reference/0.90/indices-templates.html#config) referenced in the elasticsearch_config_file setting in the Graylog configuration file (

[graylog2] Re: Setting default TTL for new indices

2015-07-28 Thread ZeroUno
Il 28/07/15 12:06, ZeroUno ha scritto: I tried with templates: I created this file as templates/graylog2_ttl_template.json inside /etc/elasticsearch, which is where elasticsearch configuration can be found: A small update: I can see this can work if I create the template by curl -XPUT