Querying tags and showing the results

Graylog Central (peer support)
1

Hi,

We are learning and researching on Graylog, and hoping that Graylog can meet our needs on logs management. One requirement we have is tagging logs and then query with the tags and also show the results on the dashboard. By reading this (Tags - Am I missing it?), I understand that tagging can be achieved by using Field, and multiple tags can be added by using Array of fields.

I’d like to ask:

  1. f querying by an array of fields?
  2. Is it possible to query by an array of fields using the dashboard?

Any comments/pointers/blog appreciated. Thanks.

2

he @skwokie

processing, normalizing log messages is one of the key features of Graylog. That includes adding additional information to logs. Every field can be queried/searched. Because every action in Graylog is based on searches, you can add this information to a dashboard.

You might want to check the Graylog ressources:

1 Like
3

Thanks, Jan. They are some good info and they help me get more familiar with Graylog. To learn more, what is the next stop that you’d suggest? Thanks.

4

I would suggest:

  1. First check documentation, and try to play with it
    https://docs.graylog.org/en/3.1/
  2. Check webinars
    https://www.graylog.org/events
  3. And also blog posts from Tech Series are great:
    https://www.graylog.org/tags/tech-series
1 Like
5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.