Re: [graylog2] Re: Backfilling graylog with past data

On Fri, Jul 15, 2016 at 2:50 AM, Jeremy Farr wrote: > Jason have you noticed any issues when adding to indices that are not the > currently active one? > No. My indices don't last more than an hour and I have shoved in data that was days old - so it definitely all went into

[graylog2] Re: Backfilling graylog with past data

Thank you Jochen. On Wednesday, July 13, 2016 at 2:14:45 AM UTC-5, Jochen Schalanda wrote: > > Hi Jeremy, > > you can use Logstash or Filebeat (or any other log shipper) to backfill > data into Graylog, too. Simply point it to the file (or source) you want to > use as an input and use a GELF

Re: [graylog2] Re: Backfilling graylog with past data

Jason have you noticed any issues when adding to indices that are not the currently active one? On Thursday, July 14, 2016 at 2:35:26 AM UTC-5, Jason Haar wrote: > > > On Wed, Jul 13, 2016 at 7:14 PM, Jochen Schalanda > wrote: > >> Simply point it to the file (or source)

[graylog2] Re: Backfilling graylog with past data

Hi Jeremy, you can use Logstash or Filebeat (or any other log shipper) to backfill data into Graylog, too. Simply point it to the file (or source) you want to use as an input and use a GELF output to send data into Graylog. Also make sure that the timestamp field is valid, because otherwise