Help needed for integration with libreNMS

Graylog Central (peer support)
1

Anyone with some experience with using graylog against librenms?

accourding to libre docs, its possible, i just dont get any data over…

2

Please elaborate a little more.

3

I need a little help troubleshooting why my graylog integrations doesnt show anything.

i’ve put following in the config according to the librenms doc

$config[‘graylog’][‘server’] = ‘http://172.16.65.200’;
$config[‘graylog’][‘port’] = ‘9000’;
$config[‘graylog’][‘username’] = ‘librenms’;
$config[‘graylog’][‘password’] = ‘*******’;

without any luck. i’ve tried with my port 129000 for REST API also (i dont proxy it to 80).
is there any logs or anything with can help me on track to get it working?

4

in the graylog end, i think some sort of log to see if librenms actually tries to login, or get data

5

So, what’s your actual Graylog configuration?

6

its mostly default, but heres the config:

rest_listen_uri = http://172.16.65.200:12900
web_listen_uri = http://0.0.0.0:9000
web_endpoint_uri = http://<remove>:12900
rest_transport_uri = http://172.16.65.200:12900
is_master = true
node_id_file = /etc/graylog/server/node-id
password_secret = <removed>
root_password_sha2 = <removed>
root_timezone = Europe/Copenhagen
plugin_dir = /usr/share/graylog-server/plugin
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 1
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog
allow_leading_wildcard_searches = false
allow_highlighting = false
elasticsearch_discovery_zen_ping_unicast_hosts = 172.16.65.200:9200
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
content_packs_dir = /usr/share/graylog-server/contentpacks
content_packs_auto_load = grok-patterns.json

Ive created a read user with access to the all_stream which i wanted to use with librenms.
Librenms is located in the same subnet, and they have no limitations between them

7

I guess the LibreNMS integration wants to talk to the Graylog REST API, not to the web interface.

8

the documentation states the web…

9

That wouldn’t make sense.

Please provide a link to the documentation you’re referring to.

10

https://docs.librenms.org/#Extensions/Graylog/

11

Maybe you want to read that again.

I don’t find any reference to the Graylog web interface on that page.

12

$config[‘graylog’][‘server’] = ‘http://127.0.0.1’;
$config[‘graylog’][‘port’] = ‘9000’;

are the same i use to access the graylog web interface

13

Yeah, that’s the problem.

14

the librenms anticipates that from graylog 2.1 and upwards an base_uri /api/ så in that case i gues its using the api?

15

You’ve configured your Graylog node to provide the Graylog REST API at http://172.16.65.200:12900/ (no additional path), so configure LibreNMS accordingly.

16

tried that.

is there a log over the api accesss in graylog?

17

What did you try exactly?

http://docs.graylog.org/en/2.3/pages/securing.html#configuring-the-access-log

18

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.