Hi, Please how can I configure Filebeat to send logs to Graylog !!!

I install : elasticsearch 5.3, but i still have this : [image]

These are the logs of elasticsearch : [2018-06-18T10:38:56,789][WARN ][o.e.b.ElasticsearchUncaughtExceptionHandler] [] uncaught exception in thread [main] org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to obtain node locks, tried [[/data/elasticsearch/elastics…

[image] asalma: I install : elasticsearch 5.3 Why not the latest stable version of Elasticsearch 5.x? Elasticsearch 5.6.10 released | Elastic Blog [image] asalma: but i still have this : Because Graylog couldn’t index messages into Elasticsearch, the messages were written into the on-…

Maybe you should try to install the Graylog virtual appliance: http://docs.graylog.org/en/2.4/pages/installation/virtual_machine_appliances.html That way, you don’t have to install each component separately.

[image] jochen: Why not the latest stable version of Elasticsearch 5.x? https://www.elastic.co/blog/elasticsearch-5-6-10-released When I want to install the version they drive me to the last one 6.3

https://www.elastic.co/de/downloads/past-releases/elasticsearch-5-6-10

can you tell me how to unistall graylog, I want to install graylog from the begining !!

Please read the step-by-step installation guide: Ubuntu: http://docs.graylog.org/en/2.4/pages/installation/os/ubuntu.html Debian: http://docs.graylog.org/en/2.4/pages/installation/os/debian.html RHEL/CentOS: http://docs.graylog.org/en/2.4/pages/installation/os/centos.html

[image] jochen: Either delete the journal while Graylog is stopped, or wait until the messages have been indexed. I did this and I had this : 2018-06-18T11:56:16.523+02:00 WARN [KafkaJournal] Journal utilization (104.0%) has gone over 95%. 2018-06-18T11:56:16.525+02:00 INFO [KafkaJournal] …

[image] asalma: I did this and I had this : The step-by-step guides can be copy & pasted into a running Debian, Ubuntu, or RHEL/CentOS Linux and will work. We’ve tested them multiple times. If they don’t work for you, you’ve probably digressed from them. In that case, you’ll have to tell us …

Filebeat configuration

Graylog Central (peer support)

jochen (Jochen) June 18, 2018, 1:15pm 45

Either you fix the lack of permissions on the Elasticsearch data path (see Unix/Linux Filesystem Permissions 101 for an introduction), or you forget about manually installing each component and install the virtual appliance.

1 Like

Topic		Replies	Views
Not receiving all logs in Graylog Graylog Central (peer support) sidecar , filebeat-linux , nosendlogfblx , clfblx	7	4665	April 5, 2019
Graylog 3.1.4 - Containerized \| Elasticsearch-oss 6.8.6 - on host \| Filebeat 6.8.5 - on host Graylog Central (peer support) sidecar , nxlog , filebeat-linux , filebeat-windows , winlogbeat , nodatanx , nosendlogfblx , clfblx	8	2634	March 13, 2020
Graylog setup not showing logs Graylog Central (peer support) sidecar , filebeat-linux , elastic	23	2321	December 21, 2022
GL Cluster installation with settings using nginx Graylog Central (peer support) sidecar , nxlog , filebeat-linux , winlogbeat , nodatanx , nosendlogfblx	33	4038	August 1, 2017
Unabble to find the Greylog sidecar node logs Graylog Central (peer support) sidecar , filebeat-linux , nosendlogfblx	11	1585	November 11, 2020

Filebeat configuration

Related topics