Graylog appender metrics

[ivankisic]

Hi,

According to this blog post there are 1, 5 and 15 minute rates for Graylog log levels. I’m particularly looking for these:

org.apache.logging.log4j.core.Appender.warn

org.apache.logging.log4j.core.Appender.error

org.apache.logging.log4j.core.Appender.fatal

Using the Graylog prometheus report I only see totals available, example:

org_apache_logging_log4j_core_Appender_warn_total

Are the other ones available anywhere else? Graylog ver 2.1.2.

[jochen]

The metrics do exist in Graylog:

The Prometheus metrics reporter just exports the total number of messages per log level and not the aggregated values (such as the 1m, 5m, 15m values):

prometheus/client_java/blob/parent-0.0.26/simpleclient_dropwizard/src/main/java/io/prometheus/client/dropwizard/DropwizardExports.java#L104-L117

You should be able to calculate the change rate or averages per timeframe in Prometheus using the included functions.

Also make sure to check out https://prometheus.io/docs/querying/examples/.

[ivankisic]

Yeah thanks, I used irate:

irate(org_apache_logging_log4j_core_Appender_warn_total{job="graylog", location="earth"}[15m])