# \#automation **URL:** https://community.graylog.org/tag/automation/100.md [Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md) --- ## [Quick™ Updated {{Official}} List of Frontier™ Airlines CUSTOMER© SERVICE℗ (24/7 Live Person ) Numbers: A Complete Guide](https://community.graylog.org/t/quick-updated-official-list-of-frontier-airlines-customer-service-24-7-live-person-numbers-a-complete-guide/36565)
**Author:** [@posine7490](https://community.graylog.org/u/posine7490)\ **Replies:** 0\ **Last updated:** [November 6, 2025, 9:12pm UTC](https://community.graylog.org/t/quick-updated-official-list-of-frontier-airlines-customer-service-24-7-live-person-numbers-a-complete-guide/36565 "2025-11-06T21:12:50Z")
how to eat mango in 5 minutnes --- ## [Correlating events from multiple streams](https://community.graylog.org/t/correlating-events-from-multiple-streams/36437)
**Author:** [@Miki](https://community.graylog.org/u/Miki)\ **Replies:** 1\ **Last updated:** [October 13, 2025, 2:23pm UTC](https://community.graylog.org/t/correlating-events-from-multiple-streams/36437 "2025-10-13T14:23:03Z")
Hi everyone, I’m using the free version of Graylog 6.3.3. Is there a way to create an alert that triggers only if both of these log events occur (from different streams) within 5 minutes? Stream AD → winlogbeat\_even… --- ## [Suggestions for Prebuilt Dashboards and Monitoring Setup](https://community.graylog.org/t/suggestions-for-prebuilt-dashboards-and-monitoring-setup/36411)
**Author:** [@Gabriellabrowne](https://community.graylog.org/u/Gabriellabrowne)\ **Replies:** 0\ **Last updated:** [October 6, 2025, 8:26am UTC](https://community.graylog.org/t/suggestions-for-prebuilt-dashboards-and-monitoring-setup/36411 "2025-10-06T08:26:30Z")
Hi everyone, I’ve been exploring ways to make Graylog dashboards easier to use, especially for teams that need quick insights into their systems. One thing that could help a lot is having prebuilt dashboards designed sp… --- ## [Exporting graylog 6.0.7 configuration of linux](https://community.graylog.org/t/exporting-graylog-6-0-7-configuration-of-linux/34842)
**Author:** [@mohammad\_ramadan](https://community.graylog.org/u/mohammad_ramadan)\ **Replies:** 2\ **Last updated:** [August 17, 2025, 5:55am UTC](https://community.graylog.org/t/exporting-graylog-6-0-7-configuration-of-linux/34842 "2025-08-17T05:55:24Z")
I have deployed graylog 6 on ubuntu Linux 22, and working fine but due to storage issues i need to export all graylog configurations only such as dashboard, inputsand other rela5ed settings’" including required third p… --- ## [Pipeline rule editor error when updating rules](https://community.graylog.org/t/pipeline-rule-editor-error-when-updating-rules/35561)
**Author:** [@elster](https://community.graylog.org/u/elster)\ **Replies:** 23\ **Last updated:** [July 11, 2025, 7:59am UTC](https://community.graylog.org/t/pipeline-rule-editor-error-when-updating-rules/35561 "2025-07-11T07:59:59Z")
Hi everyone! I hope someone can help. 1. Describe your incident: There’s an error when updating pipeline rules. I can create new rules with the rule editor from scratch just fine but as soon as I want to update a rule … --- ## [Preflight setup automation](https://community.graylog.org/t/preflight-setup-automation/35977)
**Author:** [@Super-Boy](https://community.graylog.org/u/Super-Boy)\ **Replies:** 5\ **Last updated:** [July 10, 2025, 3:04pm UTC](https://community.graylog.org/t/preflight-setup-automation/35977 "2025-07-10T15:04:47Z")
Hello, We recently installed graylog as a container in Debian12 linux VM. I can see three containers i.e. Graylog, datanode and mongodb are running without any issues but to start with datanode, I need to complete the pr… --- ## [Replace "logcheck" by Graylog?](https://community.graylog.org/t/replace-logcheck-by-graylog/35887)
**Author:** [@ralfbergs](https://community.graylog.org/u/ralfbergs)\ **Replies:** 0\ **Last updated:** [June 23, 2025, 7:20am UTC](https://community.graylog.org/t/replace-logcheck-by-graylog/35887 "2025-06-23T07:20:03Z")
1. Purpose: I’m looking into replacing “logcheck” by Graylog. Currently I’m using “logcheck” on my Debian bare-metal server to become aware of events of interest. I’ve created an extensive regexp pattern list to suppres… --- ## [Unattended installation - standalone](https://community.graylog.org/t/unattended-installation-standalone/34915)
**Author:** [@3isenHeiM](https://community.graylog.org/u/3isenHeiM)\ **Replies:** 4\ **Last updated:** [February 14, 2025, 9:43am UTC](https://community.graylog.org/t/unattended-installation-standalone/34915 "2025-02-14T09:43:34Z")
I’m trying to install a graylog instance on a single server (both datanode and graylog-server), on a Debian 12 VM. I’d like to automate the pre-flights configuration that configure the certificates and the keystore (who… --- ## [Error " could not retrive event definitions " error in alert page](https://community.graylog.org/t/error-could-not-retrive-event-definitions-error-in-alert-page/34880)
**Author:** [@genevio](https://community.graylog.org/u/genevio)\ **Replies:** 1\ **Last updated:** [February 7, 2025, 12:45pm UTC](https://community.graylog.org/t/error-could-not-retrive-event-definitions-error-in-alert-page/34880 "2025-02-07T12:45:36Z")
Describe your incident: Error " could not retrive event definitions " error in alert page . We have created an alert and after that the Email started flowing more which stopped out entire Alert page to be crashed , I w… --- ## [Export whole graylog6.0.7 configuration ](https://community.graylog.org/t/export-whole-graylog6-0-7-configuration/34837)
**Author:** [@mohammad\_ramadan](https://community.graylog.org/u/mohammad_ramadan)\ **Replies:** 2\ **Last updated:** [February 4, 2025, 1:21pm UTC](https://community.graylog.org/t/export-whole-graylog6-0-7-configuration/34837 "2025-02-04T13:21:38Z")
Hello Team, I have deployed graylog 6.0.7 on ubuntu 22 sever, and working as logging fine, but due to storage problems, I need to know if there is a way to export the whole configuration of my current gralog deployment … --- ## [Need to compress logs older than month to save space](https://community.graylog.org/t/need-to-compress-logs-older-than-month-to-save-space/34527)
**Author:** [@mohammad\_ramadan](https://community.graylog.org/u/mohammad_ramadan)\ **Replies:** 2\ **Last updated:** [December 27, 2024, 6:34am UTC](https://community.graylog.org/t/need-to-compress-logs-older-than-month-to-save-space/34527 "2024-12-27T06:34:08Z")
1. Describe your the incident: I have too many logs that are eating the storage space, I need a way to compress indecied to save storage OS Information: Ubuntu Linux v 22 (64-bit) Package Version: graylog 6.0.7 --- ## [Keep only the last value](https://community.graylog.org/t/keep-only-the-last-value/33579)
**Author:** [@Julp](https://community.graylog.org/u/Julp)\ **Replies:** 4\ **Last updated:** [September 19, 2024, 1:01pm UTC](https://community.graylog.org/t/keep-only-the-last-value/33579 "2024-09-19T13:01:31Z")
Hello everyone, I use Graylog to push ANSIBLE logs from a whole fleet of Ubuntu client machines. I collect logs in this format: “Task: Firefox: Creation of pin for installation package successful .” or “Task: ‘Update… --- ## [Multi node cluster](https://community.graylog.org/t/multi-node-cluster/33378)
**Author:** [@omkar](https://community.graylog.org/u/omkar)\ **Replies:** 3\ **Last updated:** [September 3, 2024, 10:03am UTC](https://community.graylog.org/t/multi-node-cluster/33378 "2024-09-03T10:03:06Z")
I have 3 node graylog cluster our kubernetes pod logs tranfer on this by using node ip and port but when node goes down then not getting logs how to create node load balancing for fault tolerance --- ## [Graylog docker compose file - put all config in docker file (email, notifications, alerts)](https://community.graylog.org/t/graylog-docker-compose-file-put-all-config-in-docker-file-email-notifications-alerts/33344)
**Author:** [@royalstar](https://community.graylog.org/u/royalstar)\ **Replies:** 1\ **Last updated:** [August 27, 2024, 1:25pm UTC](https://community.graylog.org/t/graylog-docker-compose-file-put-all-config-in-docker-file-email-notifications-alerts/33344 "2024-08-27T13:25:23Z")
Hi, Is it possible (and how) to define all the settings I use with Graylog, in a docker compose file? For example, email notifications, alerts, event definitions, users… to put everything in a docker compose file and du… --- ## [Generating new Sidecar Token via API](https://community.graylog.org/t/generating-new-sidecar-token-via-api/33284)
**Author:** [@DoubleM](https://community.graylog.org/u/DoubleM)\ **Replies:** 4\ **Last updated:** [August 23, 2024, 9:08am UTC](https://community.graylog.org/t/generating-new-sidecar-token-via-api/33284 "2024-08-23T09:08:03Z")
Hi Community, we’re using Graylog actively since Version 4.1x and were really happy. As the environment got bigger, we’ve come up with the idea to automate as much as possible. We built a whole batch script to install … --- ## [Does any one using helm chart to install graylog if yes what is the source details for GL 6.0.3 certified by the graylog org](https://community.graylog.org/t/does-any-one-using-helm-chart-to-install-graylog-if-yes-what-is-the-source-details-for-gl-6-0-3-certified-by-the-graylog-org/32827)
**Author:** [@rgajula](https://community.graylog.org/u/rgajula)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 12:34pm UTC](https://community.graylog.org/t/does-any-one-using-helm-chart-to-install-graylog-if-yes-what-is-the-source-details-for-gl-6-0-3-certified-by-the-graylog-org/32827 "2024-06-25T12:34:22Z")
Does any one using helm chart to install graylog if yes what is the source details for GL 6.0.3 certified by the graylog org --- ## [Correlation Notifications Not Giving a Search Replay](https://community.graylog.org/t/correlation-notifications-not-giving-a-search-replay/32583)
**Author:** [@EyImWawkinHeah](https://community.graylog.org/u/EyImWawkinHeah)\ **Replies:** 8\ **Last updated:** [June 3, 2024, 3:02pm UTC](https://community.graylog.org/t/correlation-notifications-not-giving-a-search-replay/32583 "2024-06-03T15:02:57Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Fully automate preflight for graylog with graynode](https://community.graylog.org/t/fully-automate-preflight-for-graylog-with-graynode/32586)
**Author:** [@harmonjeff](https://community.graylog.org/u/harmonjeff)\ **Replies:** 0\ **Last updated:** [May 29, 2024, 7:42pm UTC](https://community.graylog.org/t/fully-automate-preflight-for-graylog-with-graynode/32586 "2024-05-29T19:42:14Z")
1. Describe your incident: As part of a larger infrastructure deployment in a test lab, I am trying to bring up a graylog instance with a graylog datanode in docker containers. Easy enough to do that with docker run and… --- ## [HOW TO: AbuseIPDB lookup setup](https://community.graylog.org/t/how-to-abuseipdb-lookup-setup/32508)
**Author:** [@jonathanb](https://community.graylog.org/u/jonathanb)\ **Replies:** 0\ **Last updated:** [May 23, 2024, 9:12am UTC](https://community.graylog.org/t/how-to-abuseipdb-lookup-setup/32508 "2024-05-23T09:12:04Z")
I have seen snippets, etc, on how to look up AbuseIPDB but not end to end, so I thought I would write an article on how to. With this setup, you will be able to look up from the AbuseIPDB API system the score on an IP a… --- ## [Reindexing automatically for migration from Elastic 6.8 (indices) to OpenSearch](https://community.graylog.org/t/reindexing-automatically-for-migration-from-elastic-6-8-indices-to-opensearch/31990)
**Author:** [@TechSys](https://community.graylog.org/u/TechSys)\ **Replies:** 1\ **Last updated:** [April 4, 2024, 2:50am UTC](https://community.graylog.org/t/reindexing-automatically-for-migration-from-elastic-6-8-indices-to-opensearch/31990 "2024-04-04T02:50:53Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Limiting fields in api call (graylog 4.2)](https://community.graylog.org/t/limiting-fields-in-api-call-graylog-4-2/31866)
**Author:** [@AxisNL](https://community.graylog.org/u/AxisNL)\ **Replies:** 1\ **Last updated:** [March 21, 2024, 2:27am UTC](https://community.graylog.org/t/limiting-fields-in-api-call-graylog-4-2/31866 "2024-03-21T02:27:45Z")
I want to run a nightly report and get stuff from the graylog api for that. My query works, but I get all 50 or so fields for these kind of messages, which is waaaay to much data. I only need the timestamp and one other … --- ## [How to adjust the execution time of the task of Index Rotate](https://community.graylog.org/t/how-to-adjust-the-execution-time-of-the-task-of-index-rotate/31880)
**Author:** [@sanpichen](https://community.graylog.org/u/sanpichen)\ **Replies:** 0\ **Last updated:** [March 21, 2024, 1:11am UTC](https://community.graylog.org/t/how-to-adjust-the-execution-time-of-the-task-of-index-rotate/31880 "2024-03-21T01:11:43Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Graylog Deflector not repointing itself](https://community.graylog.org/t/graylog-deflector-not-repointing-itself/31459)
**Author:** [@sahilcool](https://community.graylog.org/u/sahilcool)\ **Replies:** 4\ **Last updated:** [February 13, 2024, 9:19am UTC](https://community.graylog.org/t/graylog-deflector-not-repointing-itself/31459 "2024-02-13T09:19:24Z")
So I have logstash and graylog set up in kubernetes (logstash pushes to graylog) and have an elasticsearch cluster for storage. The problem I am facing is that, whenever my ES cluster goes red (due to storage problems),… --- ## [Search API Endpoint - Good practices](https://community.graylog.org/t/search-api-endpoint-good-practices/31273)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 2\ **Last updated:** [January 24, 2024, 10:05am UTC](https://community.graylog.org/t/search-api-endpoint-good-practices/31273 "2024-01-24T10:05:37Z")
Hi, I’m currently used to run automation with scripts making use of the following endpoints: /search/universal/absolute /search/universal/relative Those endpoints are marked as Legacy so their usage should be avoided… --- ## [Export Api Not working](https://community.graylog.org/t/export-api-not-working/31043)
**Author:** [@aditsoni](https://community.graylog.org/u/aditsoni)\ **Replies:** 9\ **Last updated:** [January 12, 2024, 5:14am UTC](https://community.graylog.org/t/export-api-not-working/31043 "2024-01-12T05:14:41Z")
I am currently in the process of integrating Graylog APIs into our system, and while I have successfully received data in JSON format through the API, we are encountering difficulties with the export API. We have integ… --- ## [Is Graylog community version 4.2 can be integrate with Okta?](https://community.graylog.org/t/is-graylog-community-version-4-2-can-be-integrate-with-okta/31147)
**Author:** [@abhijitvidhate](https://community.graylog.org/u/abhijitvidhate)\ **Replies:** 1\ **Last updated:** [January 6, 2024, 5:49pm UTC](https://community.graylog.org/t/is-graylog-community-version-4-2-can-be-integrate-with-okta/31147 "2024-01-06T17:49:13Z")
I am unable to see Okta as an authentication service in Graylog. Could you please suggest if anything can be done in order to get Okta as an authentication service in Graylog community version? --- ## [Delayed event notifications sending in batches](https://community.graylog.org/t/delayed-event-notifications-sending-in-batches/30226)
**Author:** [@betheredgeacc](https://community.graylog.org/u/betheredgeacc)\ **Replies:** 12\ **Last updated:** [October 5, 2023, 1:19am UTC](https://community.graylog.org/t/delayed-event-notifications-sending-in-batches/30226 "2023-10-05T01:19:26Z")
1. Describe your incident: I have two events setup so far in my proof of concept: Checking for a particular error message to alert me when a 3rd party API service is failing so I can contact them before we lose too m… --- ## [\[PLUGIN\] Customizable configuration](https://community.graylog.org/t/plugin-customizable-configuration/29990)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 0\ **Last updated:** [September 4, 2023, 11:52am UTC](https://community.graylog.org/t/plugin-customizable-configuration/29990 "2023-09-04T11:52:34Z")
Hi, I’m developping a plugin for graylog and I would need the user to store it’s token into it in order to automate some interactions with the graylog’s API. Do you know any way to store such kind of settings through a… --- ## [Cannot auto install content pack](https://community.graylog.org/t/cannot-auto-install-content-pack/29160)
**Author:** [@davama](https://community.graylog.org/u/davama)\ **Replies:** 4\ **Last updated:** [June 15, 2023, 2:25am UTC](https://community.graylog.org/t/cannot-auto-install-content-pack/29160 "2023-06-15T02:25:57Z")
1. Describe your incident: Auto-installing a content\_pack onto a new graylog container. 2. Describe your environment: OS Information: rocky linux 9 (host) Package Version: graylog 5.1.1 Service logs, configu… --- ## [Automate sidecar/Autoconfigure Sidecar/push configuration automatically using Powershell](https://community.graylog.org/t/automate-sidecar-autoconfigure-sidecar-push-configuration-automatically-using-powershell/28724)
**Author:** [@dsugg](https://community.graylog.org/u/dsugg)\ **Replies:** 1\ **Last updated:** [May 10, 2023, 4:01pm UTC](https://community.graylog.org/t/automate-sidecar-autoconfigure-sidecar-push-configuration-automatically-using-powershell/28724 "2023-05-10T16:01:32Z")
\[details="Summary"\] \*\*1. Describe your incident:\*\* I have searched everywhere to find someone providing a script to automate sidecar configuration for graylog 4.3.14. It did not exist so I made it, leave critiques opin… [Next page](https://community.graylog.org/tag/automation/100.md?match_all_tags=true&page=1&tags%5B%5D=automation)