[graylog2] Re: Quick Values not working

2017-02-03 Thread Steve Kuntz
name to something else and everything starting working again. I am > converting this field to an integer and was doing a search on if the field > value was greater than 0. > > -Bill > > On Friday, February 3, 2017 at 5:08:14 AM UTC-10, Steve Kuntz wrote: >> >> I'm

[graylog2] Re: Quick Values not working

2017-02-03 Thread Steve Kuntz
Unfortunately not, it's the only log message that shows when trying to do a quick value on the field. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+

[graylog2] Re: Quick Values not working

2017-02-03 Thread Steve Kuntz
Same here but I wasn't sure it was related to the update. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this di

[graylog2] Re: Quick Values not working

2017-02-03 Thread Steve Kuntz
There is an error in the graylog.log WARN [SearchResource] Unable to execute search: [reduce] Any and All help is appreciated. On Friday, February 3, 2017 at 11:59:34 AM UTC-5, Steve Kuntz wrote: > > Also Field Statistics and Generate Chart work on this same data set as > well an

[graylog2] Re: Quick Values not working

2017-02-03 Thread Steve Kuntz
Also Field Statistics and Generate Chart work on this same data set as well and I think they require Numeric values as well. On Friday, February 3, 2017 at 11:44:44 AM UTC-5, Steve Kuntz wrote: > > As a test my search is > > _exists_:http_response_code AND http_response_code

[graylog2] Re: Quick Values not working

2017-02-03 Thread Steve Kuntz
the field is numeric in all > messages of the queried time range. If there are some non-numeric values > for that message field within the queried time range, you'll receive the > error message you've already mentioned. > > Cheers, > Jochen > > On Friday, 3 Februa

Re: [graylog2] Re: Indices and edit Extractor page timing out

2017-02-03 Thread Steve Kuntz
Currently each index is ~10-15G and spans ~10-15 minutes doing this would make my indices huge and I'm guessing slower to search. On Fri, Feb 3, 2017 at 10:51 AM, Jochen Schalanda wrote: > Hi Steve, > > On Friday, 3 February 2017 16:03:04 UTC+1, Steve Kuntz wrote: >> >

[graylog2] Re: Indices and edit Extractor page timing out

2017-02-03 Thread Steve Kuntz
Currently each index is ~10-15G and spans ~10-15 minutes doing this would make my indices huge and I'm guessing slower to search. On Friday, February 3, 2017 at 10:51:25 AM UTC-5, Jochen Schalanda wrote: > > Hi Steve, > > On Friday, 3 February 2017 16:03:04 UTC+1, Steve Kuntz wr

[graylog2] Quick Values not working

2017-02-03 Thread Steve Kuntz
I'm having a new issue getting quick values since I modified some fields. This is just to get the HTTP status codes but there is some issue. All values are being converted to numeric but I'm getting an error. I've attached the error and the stats to show what the data is. -- You received this

[graylog2] Re: Indices and edit Extractor page timing out

2017-02-03 Thread Steve Kuntz
ith the extractor page might have been fixed in Graylog 2.2.0, > see https://github.com/Graylog2/graylog2-server/issues/3366 for the > related GitHub issue. > > Cheers, > Jochen > > On Thursday, 2 February 2017 21:56:32 UTC+1, Steve Kuntz wrote: >> >> Hi >>

[graylog2] Re: Indices and edit Extractor page timing out

2017-02-02 Thread Steve Kuntz
Hi This is still a big issue for me. Is there anything I can do? Is there any more information I can provide to get help? On Wednesday, December 14, 2016 at 10:46:36 AM UTC-5, Steve Kuntz wrote: > > Hi, > > Has anyone else seen this behavior? Everything works well until I hit th

[graylog2] Remove persistent setting

2016-12-20 Thread Steve Kuntz
Hi, I'm trying to remove a persistent setting that I want to revert back to the value in the configuration file but I'm getting an error This is taken directly from the documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-update-settings.html curl -XPUT loc

[graylog2] Setting up buffers

2016-12-19 Thread Steve Kuntz
Hi I can't seem to find any documentation on-line on how to setup the following settings. Is there someone point me in the right direction? Is the only way to find the correct values for my environment to scale them up and test? If so what order should this be done in? output_batch_size output_

[graylog2] Re: Indices and edit Extractor page timing out

2016-12-15 Thread Steve Kuntz
Any thoughts? Could I have something setup improperly? On Wednesday, December 14, 2016 at 10:46:36 AM UTC-5, Steve Kuntz wrote: > > Hi, > > Has anyone else seen this behavior? Everything works well until I hit the > Indices page or the try to edit an extractor. After this s

[graylog2] Re: Indices and edit Extractor page timing out

2016-12-14 Thread Steve Kuntz
Hi Jochen, My version are: elasticsearch-2.4.1-1 graylog-server-2.1.2-1 On Wednesday, December 14, 2016 at 10:46:36 AM UTC-5, Steve Kuntz wrote: > > Hi, > > Has anyone else seen this behavior? Everything works well until I hit the > Indices page or the try to edit an extrac

[graylog2] Indices and edit Extractor page timing out

2016-12-14 Thread Steve Kuntz
Hi, Has anyone else seen this behavior? Everything works well until I hit the Indices page or the try to edit an extractor. After this sometimes I have to restart Graylog to get the interface to respond again. Could I have too many Indices and/or shards? I'm currently processing about 40,000 m

[graylog2] Elastic Search 2.4.1

2016-11-15 Thread Steve Kuntz
Hi, Quick question, does Graylog fully support connecting to Elastic Search 2.4 branch or should I stick with 2.3.5? Thanks -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, sen

Re: [graylog2] Filebeats collector only one output

2016-09-22 Thread Steve Kuntz
; > Cheers, > Marius > > > On 22 September 2016 at 17:12, Steve Kuntz > wrote: > >> Good Morning/Afternoon/Evening/Night, >> >> I'm probably missing or misunderstanding something or missing some >> documentation that says this is not supported bu

[graylog2] Filebeats collector only one output

2016-09-22 Thread Steve Kuntz
Good Morning/Afternoon/Evening/Night, I'm probably missing or misunderstanding something or missing some documentation that says this is not supported but here goes... When I configure multiple outputs in my Beats Collector Sidecar configuration in the web interface only one seems to make it to

[graylog2] Re: Multiple nodes in a cluster

2016-08-26 Thread Steve Kuntz
Thank You! Something so simple... embarrassed I didn't find it myself. On Friday, August 26, 2016 at 6:50:54 AM UTC-4, Jochen Schalanda wrote: > > Hi Steve, > > On Wednesday, 24 August 2016 22:55:21 UTC+2, Steve Kuntz wrote: >> >> [NodePingThread] Did not fi

[graylog2] Re: Multiple nodes in a cluster

2016-08-25 Thread Steve Kuntz
No Suggestions? Is there any more details I can provide to help out? On Wednesday, August 24, 2016 at 4:55:21 PM UTC-4, Steve Kuntz wrote: > > As well some additional logs form the nodes are > > [NodePingThread] Did not find meta info of this node. Re-registering. I > have

Re: [graylog2] Removing a Graylog node from the cluster

2016-08-25 Thread Steve Kuntz
I deleted the node from the nodes collection in MongoDB, This removed it from the interface. On Thursday, August 25, 2016 at 2:23:24 AM UTC-4, Jan Doberstein wrote: > > Hej Steve, > > I've been unable to find any documentation around this. How do I > completely remove a graylog node from the clu

[graylog2] Re: Multiple nodes in a cluster

2016-08-24 Thread Steve Kuntz
As well some additional logs form the nodes are [NodePingThread] Did not find meta info of this node. Re-registering. I have changed all IPs appropriately in the configuration of the 3rd node. On Wednesday, August 24, 2016 at 4:15:02 PM UTC-4, Steve Kuntz wrote: > > I have 2 nodes runnin

[graylog2] Multiple nodes in a cluster

2016-08-24 Thread Steve Kuntz
I have 2 nodes running in a cluster, one master and one slave. When I look at the nodes collection in Mongo I see the 2 nodes. I have added a 3rd node as a slave and when this node is running I end up with an issue where the cluster is complaining that there isn't a master node. When I look at

[graylog2] Removing a Graylog node from the cluster

2016-08-24 Thread Steve Kuntz
Hi, I've been unable to find any documentation around this. How do I completely remove a graylog node from the cluster? -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an

[graylog2] Re: nxlog issue after some time sending logs properly

2016-07-25 Thread Steve Kuntz
Switching to TCP helped. On Monday, July 4, 2016 at 3:25:05 PM UTC-4, Steve Kuntz wrote: > > Hello All, > > I'm running the following on CentOS and am having issues with nxlog. > > collector-sidecar-0.0.8-1.x86_64 (Centos 6.5) > nxlog-ce-2.9.1504-1.x86_64 (Centos 6.5

[graylog2] Re: Extract multiple parts of the message in to one field

2016-07-25 Thread Steve Kuntz
For anyone who was wondering how to do this, I was able to do it with a "Replace with regular expression" Extractor On Friday, July 8, 2016 at 9:09:19 AM UTC-4, Steve Kuntz wrote: > > Hi, > > I have a message like below and I would like to extract the > lat=111&long

[graylog2] Extract multiple parts of the message in to one field

2016-07-08 Thread Steve Kuntz
Hi, I have a message like below and I would like to extract the lat=111&long=222 into a single field that I use the geolocation world map on like 111,222. I've tried pipelines but have been unsuccessful trying to concatenate the 2 together into a single field. Would a drool be required? Anyone

[graylog2] nxlog issue after some time sending logs properly

2016-07-04 Thread Steve Kuntz
Hello All, I'm running the following on CentOS and am having issues with nxlog. collector-sidecar-0.0.8-1.x86_64 (Centos 6.5) nxlog-ce-2.9.1504-1.x86_64 (Centos 6.5) graylog-server-2.0.3-1.noarch (CentOS 7.2) When it start up it seems to work fine, then I get the error below. After this it does

[graylog2] Cardinality field of Statistics

2016-06-15 Thread Steve Kuntz
Hi, I would like to see a list of unique values of a text filed and was trying to use the Field Statistics to do so. It displays the correct information for 1 and 2 hours but when I go to 8 hours all values show up 0. Any suggestions? See attached. -- You received this message because you are

Re: [graylog2] My buffers are showing Nan in the node status screen

2016-06-07 Thread Steve Kuntz
Thanks Edmundo On Tuesday, June 7, 2016 at 5:00:41 AM UTC-4, Edmundo Alvarez wrote: > > Hi Steve, > > That is a known issue and will be fixed in the next Graylog release: > https://github.com/Graylog2/graylog2-server/issues/2299 > > Regards, > Edmundo > > >

[graylog2] My buffers are showing Nan in the node status screen

2016-06-06 Thread Steve Kuntz
Hi, I've setup a graylog 2.0.2 stand alone server server with 2 separate elastic search nodes. My logs are being processed however on the detailed status screen for my graylog node my buffers are showing NaN and I'm not sure why. Any idea's would be appreciated. Thanks -- You received this

[graylog2] Re: Tracking a message through multiple logs and calculating time

2016-05-02 Thread Steve Kuntz
y took for each step > "manually", feeding back those results into Graylog. > > Cheers, > Jochen > > On Monday, 2 May 2016 16:41:04 UTC+2, Steve Kuntz wrote: >> >> Hi Jochen, >> >> Thanks for clarifying. You said "out-of-the-box", would you b

[graylog2] Re: Tracking a message through multiple logs and calculating time

2016-05-02 Thread Steve Kuntz
ble with Graylog out-of-the-box. > > Cheers, > Jochen > > On Monday, 2 May 2016 16:12:36 UTC+2, Steve Kuntz wrote: >> >> Hello, >> >> I've been looking through the docs and searching online but have been >> unable to find what I'm looking for

[graylog2] Tracking a message through multiple logs and calculating time

2016-05-02 Thread Steve Kuntz
Hello, I've been looking through the docs and searching online but have been unable to find what I'm looking for. I have a message that is assigned an ID. This message with its ID will go through 5 different applications, each with its own log. What I'm looking to do is to track this message