Triggering alert if message is not sent during a certain time frame

Graylog Central (peer support)
1

I’m looking for a way to use GrayLog to detect if a specific message is not sent within a time frame. The company I work for is currently trialing GrayLog, and we’re looking to see if this would be possible. Every night we have a reboot sequence for most of our core infrastructure, and we need to listen to see if the log entry stating that everything is okay was sent to GrayLog.

Please let me know if this would be possible with stock GrayLog or with any available public plugins. Alternatively, if it would be necessary to get a custom plugin developed for this instance.

2

You could create a stream which only contains the success messages and create an alert condition which fires, if the message is missing within the last 24 hours.

http://docs.graylog.org/en/2.4/pages/streams.html
http://docs.graylog.org/en/2.4/pages/streams/alerts.html

1 Like
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.