Processed apache logs to provide clickable links to related messages (by user, resource, etc)


(Bronius Motekaitis) #1

Hi - Is it possible to process an incoming Apache log message and configure its view to present a link to similar messages either by, for example, same user ID (a custom field in my log), Apache process ID, or resource requested?

Use case

When an interesting log message shows, I want to be able to easily see other log messages pertaining to that same user. Effectively, this could be a “click path”.

It could be pretty similar to the function we already get when we click the “(+)” magnifying glass icon in a Quick View graph which pre-populates the Search field with a related term.


(Jan Doberstein) #2

with the current vanilla Graylog this is not possible. But he have the fantastic community that provides add ons and help.
I’ll shout out to @billmurrin for his slookup plugin ( https://marketplace.graylog.org/addons/3780dc6a-13f5-4f62-8546-595be7d3e37a ) that might help you. Yes it is not exactly what you are looking for - but maybe it will give you another way to reach your goal.


(system) #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.