Notification for graylog nodes backlog

[Tafsir_Alam (Tafsir)]

Hi

Is there a way to set a notification from the web-console or server-side that will notify us whenever any Graylog nodes get backlogged?

[jan (Jan Doberstein)]

@Tafsir_Alam

such is not possible at the moment. It will be a feature request to make this possible.

[Tafsir_Alam (Tafsir)]

OK, thanks for reply @jan

[shoothub]

You can still create script that will query node information from REST API and send mail if there is a problem.

First get nodes:
http://graylog:9000/api/cluster

And after their statistics:
http://graylog:9000/api/cluster/NODE_ID/journal

Or better NMS system like Zabbix to query statistics and send alert it problem. If you use Zabbix you can use this template:

madchap/graylog2-zabbix

[Tafsir_Alam (Tafsir)]

@shoothub But how REST API will monitor graylog backlogged node? REST API will only show the cluster-info.

[shoothub]

Maybe I don’t understand correctly your question. Do you want to check number of unprocessed messages in node or something different?

If yes, REST API ( api/cluster/NODE_ID/journal) can return value:

"uncommitted_journal_entries":,

[Tafsir_Alam (Tafsir)]

Thanks, @shoothub REST API worked