Hey Guys i want to present you a small guide to connect the Graylog Database Elasticsearch with Grafana.
Environment:
Elastic version: 2.10.2
Debian 10
Graylog 5.2.7
Graylog:
Elasticsearch
path/to/elasticsearch.yml
# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
#network.host: 192.168.0.1
network.host: 127.0.0.1
http.host: 0.0.0.0
#
# Set a custom port for HTTP:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#
To verify the connection you can try
curl http//xy.test.de:9200
Debug:
- edit your firewall rules
- restart the elasticsearch service
- monitor the logs at /var/log/elasticsearch/graylog.log
Grafana:
Special attention must be paid to the Elasticsearch details.
Here are particularly important values:
Index name = graylog_* (by default)
time field name = timestamp (in some cases @timestamp is also possible)