Hello graylog community,
I need help, with Graylog I can have SSH authentication logs failed on all my servers but I also want to have the authentication logs on the web part (login / password) when someone wants to access with a login and password failed on the web part
Best regards,
Im not sure if the free version of graylog has self logging fo that 
please, Can anyone answer me ??!
Check /var/log/graylog-server/server.log
Apache is a server web of zabbix , I receive the logs from zabbix (log ssh failed, OS from server zabbix it’s centos 7) but I want when an end-user makes an attempt on the web interface of zabbix (an authenitifcation web failed) …in case of local authentication and LDAP
on the graylog dashboard, I can see the failure logs (log ssh failure ) on my zabbix server but I want when an end-user makes an attempt on the web interface of zabbix (an authenitifcation web failed)
Zabbix doesn’t log failed logins to web interface to log file, but database (Mysql/MariaDB, PostgreSQL or another you use). Check table auditlog in zabbix database.
Mysql is the database of Zabbix … I want to have the authentication logs on the web part (login / password) when someone wants to access with a login and password failed on the web part ( interface web of my zabbix server)
if the product write this failed login to a logfile, you can collect that and send it to Graylog @Labidi
I do not know if Zabbix does this, @shoothub has written it does not.
Hi @jan Zabbix has their logs, it has a web interface “audit” and “action log” …at the level of OS the logs are stored in /var/log/messages …
You are righ, in Zabbix web interface, you can read audit logs in web interface, but these information (like failed login to web interface) is stored in database, not log file, as I mentioned before… If you want to forward this information to graylog, you need a way to read from database - table auditlog (e.g. using some script) and than forward to graylog.
yeah @shoothub you are absolutely right, logs like filed login to web interface is stored in dataabse, but my problem is how to send logs to graylog, already I have input logs for zabbix, …I work with zabbix 4.0.18…
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
