[graylog2] Graylog_Content_Pack_WinDNS ThreadID error

Hi, I installed Graylog_Content_Pack_WinDNS from the market palce. I get the following error when it tries the grok pattern. It looks like it breaks at ThreadID. Has anyone had this issue before? [2015-09-30 11:07:38,089][DEBUG][action.bulk ] [Devil Hunter Gabriel] [graylog_62][3]

Re: [graylog2] How to update virtual appliances?

Hi Jérôme, currently Elasticsearch 1.7.2 and MongoDB 3.0.6 are included: - https://github.com/Graylog2/omnibus-graylog2/blob/1.2.1-1/config/software/elasticsearch.rb - https://github.com/Graylog2/omnibus-graylog2/blob/1.2.1-1/config/software/mongodb.rb Cheers, Jochen On Wedn

[graylog2] Re: Mongodb not replicated?

Thanks Jochen! On Wednesday, September 30, 2015 at 2:45:44 AM UTC-6, Jochen Schalanda wrote: > > Hi Jesse, > > all Graylog nodes must access and use the same MongoDB database. MongoDB > itself can of course be replicated to achieve a HA setup, see > http://docs.mongodb.org/manual/core/replicati

[graylog2] Elasticsearch - evenly rebalancing shards

This may be off-topic in this forum, but I wanted to focus on the omnibus-provided configuration provided in Graylog. We have an instance with 1 large node - 6TB storage - and we're now breaking this out into 3 x 2TB smaller nodes. I've joined two of the 2TB nodes to the cluster and ES has dist

Re: [graylog2] How to update virtual appliances?

Hi Jochen, Thank you for pour quick answer. Moreover, which package version is included for Elasticsearch and Mongodb ? Thank you, Jérôme -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emai

[graylog2] Re: Grok extractor + break on match

Hi Alex, unfortunately that's not possible with Graylog at the moment (skipping the following grok patterns if the current one already matched). This being said, just creating multiple extractors per input will at least give you the extracted message fields, by running all extractors of that i

[graylog2] Grok extractor + break on match

Hello ! Is there a way to do things like that with graylog ? grok { break_on_match => true match => [ "message", "<%{POSINT:syslog_pri}>1 %{TIMESTAMP_ISO8601:syslog_time} %{SYSLOGHOST:hostname}

[graylog2] Re: Unable to input logs from Django Server to Graylog Server

The Fix was to remove 'root': { 'level': 'DEBUG', 'handlers': ['debug'] }, section from the LOGGING section in django settings. BTW: Please also consider that you have installed graypy withing your virtualenv if you are using one. On Wednesday, September 30, 2015 at 1

Re: [graylog2] How to update virtual appliances?

Hi Jérôme, please upgrade the Graylog OVA or Docker image as described in our documentation at http://docs.graylog.org/en/1.2/pages/installation/graylog_ctl.html#upgrade-graylog . The Graylog Omnibus package being used ( https://github.com/Graylog2/omnibus-graylog2) also includes MongoDB and E

Re: [graylog2] How to update virtual appliances?

Dear all, Is it possible to update graylog appliance with tgz of graylog-server and graylog-webinterface ? or it's not a best practice ? In addition, what is included in graylog_latest.deb ? just graylog product or more like elasticsearch and mongodb last version ? Thank you, regards, Jérôme

[graylog2] Re: How to load archived syslog data into Graylog.

Hi Steve, the easiest way to ingest old log files is sending them via netcat, nxlog, or logstash to Graylog. In case of netcat, you'll probably need a Raw/Plaintext input and a set of extractors in Graylog. In case of nxlog or logstash you could pre-process the logs (e. g. parse them and create

[graylog2] Re: Mongodb not replicated?

Hi Jesse, all Graylog nodes must access and use the same MongoDB database. MongoDB itself can of course be replicated to achieve a HA setup, see http://docs.mongodb.org/manual/core/replication-introduction/ for details. Cheers, Jochen On Tuesday, 29 September 2015 23:22:50 UTC+2, Jesse Skrivs

[graylog2] Centos 6 init script for Graylog Connector

Does anyone have a working init script for the Graylog Connector for CentOS 6 since they do not provide an RPM or example. Thanks! Jed -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails f

[graylog2] How to load archived syslog data into Graylog.

I have been testing out Graylog 1.2.1 using the VM appliance. I have pointed one of my syslog-ng servers at Graylog and all is working as expected. Next, I would like to load some of my archived syslog files into Graylog so I can search on older data. Is this possible? If so, what is the be

[graylog2] Re: Unable to input logs from Django Server to Graylog Server

On Thursday, September 24, 2015 at 5:41:38 PM UTC+5:30, ganesh mani wrote: > > MY setup is as follows: > > Under the same VPC. > > Amazon ec2 instance : Graylog server deployed over nginx. > > Amazon ec2 : Django Server instance installed. > > > 1. Installed graypy using pip. Configured Django S