Feeding data from Graylog/Elasticsearch into Grafana

Graylog Central (peer support)
1

1. Describe your incident:
Following up on Connecting Graylog to Grafana via Elastisearch now that the 6.0 version is live.

Just trying to figure out the configuration required to connect graylog to grafana :smiley:

2. Describe your environment:

  • OS Information: Ubuntu 20.04 - Docker 20.10.21

  • Package Version: 6.0.2

Service logs, configurations, and environment variables:
Graylog Docker compose.yml used:

I can attach grafanaā€™s configuration if needed.

3. What steps have you already taken to try and solve the problem?
Attempted configuring a client certificate via https://[graylogAddress]/system/datanodes/configuration, adding an elasticsearch source in grafana, entering the CA, private key, and client cert.
(Error grafana shows is ā€œElasticsearch error: Bad Gatewayā€)

4. How can the community help?
Iā€™m attempting to find a way to just simply feed data from graylog 6 into grafana. Previously this worked by just connecting Elasticsearch to grafana.

I know graylog 6 requires auth to connect to datanodes, just trying to get to the bottom of that.

2

Hey @brink

I have connected Grafana to Graylog, by using Elasticsearch plugin on Grafana.
But not Graylog to Grafana .

3

Yeah I think thatā€™s the opposite direction from what Iā€™m attempting to do.

I want to use the elasticSearch DataSource in Grafana to feed data from Graylog to Grafana. This is a thing that was achievable before, just trying to figure out what changed since I last did it in Graylog 4. :slight_smile:

Iā€™m also going to tag @Joel_Duffield as he had responded to the previous thread on this topic, and I hope he can give us some guidance here.

4

Ya with datanode there is a new feature that you theoretically can make it work, but datanode is still mostly in beta so there isnt a ton of documentation or tribal knowledge about it yet. If possible i would continue to run graylog with just regular opensearch and connect the same way as before.

5

Dang, I was hoping someone would know. Ah well.

Iā€™ll continue taking swings at it and post a thread if I figure out it. Thanks all!