[graylog2] unable to receive syslog/tls from Cisco devices

2017-01-08 Thread Jason Haar
Hi there We have set up our first Cisco ASA (8.4) to send syslog (TLS) messages through to graylog via logging host outside ip.add.ress TCP/ secure We already have some Unix systems using rsyslog successfully doing the same thing, but the Cisco records aren't being accepted. A sniffer shows

[graylog2] Re: Force use of IP address

2017-01-08 Thread lschroth
I utilized the downloaded the pre-configured OVA template. I tried to specify the rest and web listening address, but no change. I ended up changing eth0 to the iscsi address and the eth1 to the public address. This allowed the system to operate properly so far. I did not do any customizati

Re: [graylog2] Re: Very low message throughput after upgrading from GL 1.3.4/ES 1.7.1 to GL2.1.1/ES 2.3.5 + Error messages

2017-01-08 Thread Jochen Schalanda
Hi Bob, On Friday, 6 January 2017 16:27:36 UTC+1, Bob wrote: > > Do you recommend high volume nodes be physical? > Yes. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails f

[graylog2] Re: Force use of IP address

2017-01-08 Thread Jochen Schalanda
Hi, how exactly did you install Graylog? How exactly did you configure Graylog? And finally, which exact version of Graylog are you running? Cheers, Jochen On Friday, 6 January 2017 23:05:04 UTC+1, lsch...@palatine.il.us wrote: > > The machine I am setting up for a graylog server has two interf

[graylog2] Re: winlogbeats and graylog

2017-01-08 Thread Jochen Schalanda
Hi Jiří, On Friday, 6 January 2017 22:44:47 UTC+1, Jiří Kolb wrote: > > I would like to capture logs from windows. I installed winlogbeats and > configured beats input on graylog. I can see that connection is > estabilished, but I receive no answer. I used wireshark and curl to debug > this, bu

[graylog2] Re: amqp input vs zeromq plugin

2017-01-08 Thread Jochen Schalanda
Hi Richard, AMQP (AMQP 0.9.1 as supported by RabbitMQ ) and ZeroMQ are completely different protocols. They are not compatible in any way. Cheers, Jochen On Satu