Hi, Super Noob here so please pardon me if i dont get things on the fly. I have successfully installed Graylog Elasticsearch and Mongo as stated on the official download instruction. I also have filebeat installed and logstash. I am trying to parse/read-in contents of this log file / json path into…

Graylog does not download files. It just processes log messages that get sent to it. Maybe this topic can be helpful for ingesting old entries. If filebeat/logstash are not forwarding the incoming log messages, then something is misconfigured.

Thank you for the response. I basically followed the instructions and i cant see anything coming into my graylog input [image] Using FileBeat with GrayLog - Another Cyber Sec Blog We can use FileBeat as our log collectors for our newly created GrayLog server. We can install FileBeat on…

You need to try and narrow down the problem so we can help you effectively. First determine if filebeats is working. Here are some tips. Why do you have a TLS key file and password in your Beats input definition? You have TLS disabled. I would remove those.

Thank you again for the help. I followed your link and the first command ‘filebeat -e’ threw an error Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'/etc/filebeat/filebeat.yml') [Screenshot from 2022-08-16 14-47-52] I ran this to read in fro…

netcat would need to send to a raw input, not to the beats input, since you said this was just plain JSON. Sounds like you somehow have 2 output namespaces configured. Look at your filebeat.yml again.

Okay so basically i need to create a new input on graylog with Raw/Plainttext UDP parameters. Got it . As for the config …i cant tell where the error is or how I have 2 output namespaces [Screenshot from 2022-08-16 15-35-08]

Following the example from this link Using FileBeat with GrayLog - Another Cyber Sec Blog I noticed that theres been some traffic under the network section of the input. So should i assume that this worked to a certain degree? i cant see any log messages coming in but then again the log file i am t…

Remove the elasticsearch output

There are actually quite a few threads in the forum already on how to install and troubleshoot beats input. Here are some things to help troubleshoot: [image] Beats Input - Show received messages is empty - Graylog-Appliance Graylog Central (peer support) Hello, here ist…

Ingesting Log Files from JSON into graylog

Graylog Central (peer support)

patrickmann (Patrick Mann) August 17, 2022, 5:49am 10

There are actually quite a few threads in the forum already on how to install and troubleshoot beats input.
Here are some things to help troubleshoot:

Topic		Replies	Views
Not receiving all logs in Graylog Graylog Central (peer support) sidecar , filebeat-linux , nosendlogfblx , clfblx	6	4693	March 22, 2019
Beats Input messages not showing in Graylog Graylog Central (peer support)	1	1285	July 20, 2022
Graylog setup not showing logs Graylog Central (peer support) sidecar , filebeat-linux , elastic	22	2402	December 7, 2022
Graylog and mail server Graylog Central (peer support)	20	2476	April 6, 2022
Graylog3 couldn't receive messages Graylog Central (peer support)	5	1091	June 18, 2019

Ingesting Log Files from JSON into graylog

Related topics