How to Connect Graylog with Grafana

Hey Guys i want to present you a small guide to connect the Graylog Database Elasticsearch with Grafana.

Environment:
Elastic version: 2.10.2
Debian 10
Graylog 5.2.7

Graylog:
Elasticsearch
path/to/elasticsearch.yml

# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
#network.host: 192.168.0.1
network.host: 127.0.0.1
http.host: 0.0.0.0
#
# Set a custom port for HTTP:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#

To verify the connection you can try

curl http//xy.test.de:9200 

Debug:

  • edit your firewall rules
  • restart the elasticsearch service
  • monitor the logs at /var/log/elasticsearch/graylog.log

Grafana:


Special attention must be paid to the Elasticsearch details.

Here are particularly important values:

Index name = graylog_* (by default)
time field name = timestamp (in some cases @timestamp is also possible)

1 Like