Hi Guys, Has anyone done parsing of XML files into Graylog? I am trying that but logs are not being ingested. can someone please help me about parsing XML files into graylog? I am trying to parse DMARC XML files into graylog. TIA Blason R

Yes that is obvious and I am trying with logstash with below config or using the @wwalker config. somehow the logs are not being ingested then. Here is the config file I am referring to wwalker0307/ElasticMARC/blob/master/logstash/config/pipelines/dmarcpipeline.yml input { file { id…

Don’t try to write directly to elasticsearch, but use logstash GELF output plugin and a GELF input in Graylog.

This is what is done exactly!!! But dang its not going through. May be I try to debug now.

DMARC XML parsing with logstash and Graylog

Graylog Central (peer support)

konrad (Konrad Merz) January 2, 2019, 3:38pm 2

As @jochen already pointed out in Extracting XML fields parsing of XML should happen before putting the logs into graylog.

Topic		Replies	Views
XML files from event viewer Graylog Central (peer support)	3	1508	June 19, 2018
Feed XML files into Graylog Graylog Central (peer support) sidecar , nxlog , nodatanx	1	1682	June 13, 2019
Exhcnage emails into graylog Graylog Central (peer support)	0	93	May 20, 2024
Import Old Logs - parse to fields Graylog Central (peer support)	0	508	October 29, 2019
Best way to parse XML with sidecar before sending to Graylog Graylog Central (peer support) sidecar , filebeat-windows	2	1787	December 2, 2020

DMARC XML parsing with logstash and Graylog

Related topics