In a graylog I need to know when a particular URL hit on yesterday and how to find all details along with IP address

In Graylog I need to know when a particular URL hit on yesterday and how to find all details along with IP address.

Hello @om3352

This sounds like a basic search. First you need to identify the stream containing the message. All Messages should contain it unless it has been suppressed from routing to All Messages, in which case you’ll need to identify the rule that qualifies the message and identify which stream it routed to. Then, you’ll search. Probably the data you want is in the message field of the message.

message:“http://community.graylog.org

Any messages that qualify and the detail that is available in the message will appear in the search results.

If this is your first time using Graylog I recommend you read the documentation.

https://docs.graylog.org/en/3.3/index.html

yes i am new. but my company using Graylog for log managment.can you help me how to search

hereby using particular keywords.

developer give me a URL and asking for yesterday’s IP hits on particular URL.

@om3352

it depends how your company is handling messages, how they are ingested and if any message processing is done to them or not.

Without knowing how the messages are formatted we can’t give you any advice how to search.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.