# \#components

**URL:** https://community.graylog.org/tag/components/98.md

[Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md)

---

## [Graylog DataNode Storage – Can Wasabi S3-Compatible Storage Be Used for Hot Data and Archiving?](https://community.graylog.org/t/graylog-datanode-storage-can-wasabi-s3-compatible-storage-be-used-for-hot-data-and-archiving/37568)

<div class="topic-metadata">

**Author:** [@Golobolus](https://community.graylog.org/u/Golobolus)\
**Replies:** 1\
**Last updated:** [September 21, 2026, 8:07am UTC](https://community.graylog.org/t/graylog-datanode-storage-can-wasabi-s3-compatible-storage-be-used-for-hot-data-and-archiving/37568 "2026-09-21T08:07:22Z")

</div>

Hi Graylog Community, We are currently evaluating our Graylog storage architecture and would appreciate some guidance from the community. Our current setup has Graylog DataNodes using AWS EFS for data storage. The envi…

---

## [Not able to upgrade beyond 6.3.11 - Couldn't deserialize value (encrypted\_value and salt must be strings and cannot be missing)](https://community.graylog.org/t/not-able-to-upgrade-beyond-6-3-11-couldnt-deserialize-value-encrypted-value-and-salt-must-be-strings-and-cannot-be-missing/37437)

<div class="topic-metadata">

**Author:** [@ddean](https://community.graylog.org/u/ddean)\
**Replies:** 3\
**Last updated:** [July 20, 2026, 10:52am UTC](https://community.graylog.org/t/not-able-to-upgrade-beyond-6-3-11-couldnt-deserialize-value-encrypted-value-and-salt-must-be-strings-and-cannot-be-missing/37437 "2026-07-20T10:52:30Z")

</div>

1. Describe your incident: When starting a processing node on 6.3.12 or later, the node logs errors that a “decrypted\_value and salt must be strings and cannot be missing” and then restarts. The cluster runs on version …

---

## [Multi variable lookups](https://community.graylog.org/t/multi-variable-lookups/37067)

<div class="topic-metadata">

**Author:** [@psfletchthetek](https://community.graylog.org/u/psfletchthetek)\
**Replies:** 1\
**Last updated:** [March 8, 2026, 5:06pm UTC](https://community.graylog.org/t/multi-variable-lookups/37067 "2026-03-08T17:06:32Z")

</div>

Hi all, I’m miss something obvious here I’m sure. I’m trying to get a multi variable lookup working from a csv. I can get single variable working with no issue. I can then put a larger csv in, the data adapter comes …

---

## [Asset Import (AD / M365) - How to enhance asset objects](https://community.graylog.org/t/asset-import-ad-m365-how-to-enhance-asset-objects/36913)

<div class="topic-metadata">

**Author:** [@rbnkng](https://community.graylog.org/u/rbnkng)\
**Replies:** 0\
**Last updated:** [January 29, 2026, 9:54am UTC](https://community.graylog.org/t/asset-import-ad-m365-how-to-enhance-asset-objects/36913 "2026-01-29T09:54:01Z")

</div>

Hi everyone, I’m currently looking into Asset Enrichment ( Asset Enrichment) and it’s working so far. My question is, how did you people get the respective IP / MAC address of the machine assets attached to the assets? …

---

## [OpenSearch 2.19.1 compatibility with Graylog in Wazuh Indexer deployment](https://community.graylog.org/t/opensearch-2-19-1-compatibility-with-graylog-in-wazuh-indexer-deployment/36232)

<div class="topic-metadata">

**Author:** [@Som-gif](https://community.graylog.org/u/Som-gif)\
**Replies:** 1\
**Last updated:** [August 19, 2025, 8:34am UTC](https://community.graylog.org/t/opensearch-2-19-1-compatibility-with-graylog-in-wazuh-indexer-deployment/36232 "2025-08-19T08:34:36Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Exporting graylog 6.0.7 configuration of linux](https://community.graylog.org/t/exporting-graylog-6-0-7-configuration-of-linux/34842)

<div class="topic-metadata">

**Author:** [@mohammad\_ramadan](https://community.graylog.org/u/mohammad_ramadan)\
**Replies:** 2\
**Last updated:** [August 17, 2025, 5:55am UTC](https://community.graylog.org/t/exporting-graylog-6-0-7-configuration-of-linux/34842 "2025-08-17T05:55:24Z")

</div>

I have deployed graylog 6 on ubuntu Linux 22, and working fine but due to storage issues i need to export all graylog configurations only such as dashboard, inputsand other rela5ed settings’" including required third p…

---

## [“AWS S3 Input” is not available in Graylog 6.2](https://community.graylog.org/t/aws-s3-input-is-not-available-in-graylog-6-2/35781)

<div class="topic-metadata">

**Author:** [@rxware\_admin](https://community.graylog.org/u/rxware_admin)\
**Replies:** 0\
**Last updated:** [June 3, 2025, 3:05pm UTC](https://community.graylog.org/t/aws-s3-input-is-not-available-in-graylog-6-2/35781 "2025-06-03T15:05:11Z")

</div>

1. incident: I’m currently migrating from an older version of Graylog and need the AWS S3 input. However, it doesn’t appear in the list of available inputs in my instance. According to the official documentation, this f…

---

## [GeoIP information not populating](https://community.graylog.org/t/geoip-information-not-populating/35577)

<div class="topic-metadata">

**Author:** [@msmoak](https://community.graylog.org/u/msmoak)\
**Replies:** 0\
**Last updated:** [May 9, 2025, 4:42pm UTC](https://community.graylog.org/t/geoip-information-not-populating/35577 "2025-05-09T16:42:07Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Not able to get Email notification and opsgenie alerts from graylog](https://community.graylog.org/t/not-able-to-get-email-notification-and-opsgenie-alerts-from-graylog/34973)

<div class="topic-metadata">

**Author:** [@genevio](https://community.graylog.org/u/genevio)\
**Replies:** 2\
**Last updated:** [February 19, 2025, 1:07pm UTC](https://community.graylog.org/t/not-able-to-get-email-notification-and-opsgenie-alerts-from-graylog/34973 "2025-02-19T13:07:32Z")

</div>

Describe your incident: We had a issue in alert page and we have done few changes from backend in mongo like event\_definitions scheduler\_triggers event\_processor\_state event\_notification\_status scheduler\_job\_defin…

---

## [Graylog Possibilities](https://community.graylog.org/t/graylog-possibilities/34828)

<div class="topic-metadata">

**Author:** [@Louis1](https://community.graylog.org/u/Louis1)\
**Replies:** 2\
**Last updated:** [February 3, 2025, 1:30pm UTC](https://community.graylog.org/t/graylog-possibilities/34828 "2025-02-03T13:30:06Z")

</div>

I am training to be an IT specialist for system integration and am currently preparing for my final project. I chose Graylog because we already use it in our company and I like working with monitoring. In order to not ju…

---

## [Error after upgrade from 6.0 to 6.1](https://community.graylog.org/t/error-after-upgrade-from-6-0-to-6-1/34391)

<div class="topic-metadata">

**Author:** [@gcstech](https://community.graylog.org/u/gcstech)\
**Replies:** 5\
**Last updated:** [December 9, 2024, 9:35pm UTC](https://community.graylog.org/t/error-after-upgrade-from-6-0-to-6-1/34391 "2024-12-09T21:35:38Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Error: \[type=illegal\_argument\_exception, reason=key \[types\] while integrating wazuh indexer (opensearch) to graylog](https://community.graylog.org/t/error-type-illegal-argument-exception-reason-key-types-while-integrating-wazuh-indexer-opensearch-to-graylog/33463)

<div class="topic-metadata">

**Author:** [@lioson](https://community.graylog.org/u/lioson)\
**Replies:** 1\
**Last updated:** [September 9, 2024, 8:27am UTC](https://community.graylog.org/t/error-type-illegal-argument-exception-reason-key-types-while-integrating-wazuh-indexer-opensearch-to-graylog/33463 "2024-09-09T08:27:09Z")

</div>

Hello community, I have setup Graylog version 6.0.6+4aa664f with Opensearch v2.16.0 on Ubuntu. i followed the official documentation and installed Graylog, then i integrated it with Wazuh indexer which runs on Opensearc…

---

## [Graylog Update to 6.0.5 (Graylog 6.0.5+3ef5be7) No longer able to use existing Grok Patterns](https://community.graylog.org/t/graylog-update-to-6-0-5-graylog-6-0-5-3ef5be7-no-longer-able-to-use-existing-grok-patterns/33220)

<div class="topic-metadata">

**Author:** [@secdoc](https://community.graylog.org/u/secdoc)\
**Replies:** 5\
**Last updated:** [August 8, 2024, 7:17pm UTC](https://community.graylog.org/t/graylog-update-to-6-0-5-graylog-6-0-5-3ef5be7-no-longer-able-to-use-existing-grok-patterns/33220 "2024-08-08T19:17:04Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Amqp inputs flap under the UI](https://community.graylog.org/t/amqp-inputs-flap-under-the-ui/33081)

<div class="topic-metadata">

**Author:** [@davama](https://community.graylog.org/u/davama)\
**Replies:** 1\
**Last updated:** [July 25, 2024, 12:29pm UTC](https://community.graylog.org/t/amqp-inputs-flap-under-the-ui/33081 "2024-07-25T12:29:31Z")

</div>

Good day everyone, 1. Describe your incident: I have several amqp inputs (raw and gelf) which ingest logs. These inputs under the UI show that they are not running (0 Running) then for a brief moment it shows running. …

---

## [Can't open lookup tables: Loading component failed: undefined is not an object (evaluating 'jt.is\_mutable')](https://community.graylog.org/t/cant-open-lookup-tables-loading-component-failed-undefined-is-not-an-object-evaluating-jt-is-mutable/32698)

<div class="topic-metadata">

**Author:** [@xmcl](https://community.graylog.org/u/xmcl)\
**Replies:** 0\
**Last updated:** [June 11, 2024, 1:43pm UTC](https://community.graylog.org/t/cant-open-lookup-tables-loading-component-failed-undefined-is-not-an-object-evaluating-jt-is-mutable/32698 "2024-06-11T13:43:46Z")

</div>

Hello After downgrading from Enterprise to Community, I can’t open Lookup Tables because of error: Loading component failed: undefined is not an object (evaluating 'jt.is\_mutable') I tried to uninstall all the content…

---

## [Graylog Storage related](https://community.graylog.org/t/graylog-storage-related/31645)

<div class="topic-metadata">

**Author:** [@Amolsahare](https://community.graylog.org/u/Amolsahare)\
**Replies:** 3\
**Last updated:** [March 5, 2024, 2:40pm UTC](https://community.graylog.org/t/graylog-storage-related/31645 "2024-03-05T14:40:09Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ…

---

## [Graylog compilation](https://community.graylog.org/t/graylog-compilation/31105)

<div class="topic-metadata">

**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\
**Replies:** 2\
**Last updated:** [January 3, 2024, 9:29am UTC](https://community.graylog.org/t/graylog-compilation/31105 "2024-01-03T09:29:50Z")

</div>

Hi, I am using a graylog 5.1.9 installed manually using the following procedure (procedure): wget https://packages.graylog2.org/repo/packages/graylog-5.0-repository\_latest.deb sudo dpkg -i graylog-5.0-repository\_latest…

---

## [Graylog will not start after upgrade fron 5.1 to 5.2 - Opensearch Fails to Start](https://community.graylog.org/t/graylog-will-not-start-after-upgrade-fron-5-1-to-5-2-opensearch-fails-to-start/30621)

<div class="topic-metadata">

**Author:** [@secdoc](https://community.graylog.org/u/secdoc)\
**Replies:** 4\
**Last updated:** [November 10, 2023, 9:57pm UTC](https://community.graylog.org/t/graylog-will-not-start-after-upgrade-fron-5-1-to-5-2-opensearch-fails-to-start/30621 "2023-11-10T21:57:00Z")

</div>

1. Describe your incident: Previously running Graylog Open 5.1. I upgraded to 5.2 following the docs. After doing the obligatory reboot, thew WebUI no longer pulls up now getting the following errors 2. Describe your e…

---

## [Embedding external content](https://community.graylog.org/t/embedding-external-content/30486)

<div class="topic-metadata">

**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\
**Replies:** 0\
**Last updated:** [October 27, 2023, 4:22pm UTC](https://community.graylog.org/t/embedding-external-content/30486 "2023-10-27T16:22:34Z")

</div>

Hi, I’m trying to find a way to embed external content inside graylog. I developped a graylog plugin embedding an iframe. However the content security policy prevent the iframe to be loaded and it seems not configurab…

---

## [IPFIX input Multiple entries with same key](https://community.graylog.org/t/ipfix-input-multiple-entries-with-same-key/30047)

<div class="topic-metadata">

**Author:** [@mcury](https://community.graylog.org/u/mcury)\
**Replies:** 0\
**Last updated:** [September 7, 2023, 9:04pm UTC](https://community.graylog.org/t/ipfix-input-multiple-entries-with-same-key/30047 "2023-09-07T21:04:26Z")

</div>

I’m exporting IPFIX (netflow v10) flows from pfSense to Graylog using the IPFIX UDP input. I created the .json with the IPFIX field definitions found here iana and here RFC5102 and it is working. However, when I set pf…

---

## [Graylog smtp sending fail](https://community.graylog.org/t/graylog-smtp-sending-fail/29939)

<div class="topic-metadata">

**Author:** [@Wolfang](https://community.graylog.org/u/Wolfang)\
**Replies:** 2\
**Last updated:** [August 30, 2023, 7:04am UTC](https://community.graylog.org/t/graylog-smtp-sending-fail/29939 "2023-08-30T07:04:39Z")

</div>

Hello everyone, hope somebody can help me 1. Describe your incident: i have this incident on my graylog configuration. that work in juin but stop working 2 month ago i don’t knwo why 2. Describe your environment: …

---

## [Error After Upgrading Graylog 5.1.2 from 5.0.2 And Opensearch 2.4.1 to 2.8.0](https://community.graylog.org/t/error-after-upgrading-graylog-5-1-2-from-5-0-2-and-opensearch-2-4-1-to-2-8-0/29293)

<div class="topic-metadata">

**Author:** [@minh8356](https://community.graylog.org/u/minh8356)\
**Replies:** 3\
**Last updated:** [June 30, 2023, 9:24am UTC](https://community.graylog.org/t/error-after-upgrading-graylog-5-1-2-from-5-0-2-and-opensearch-2-4-1-to-2-8-0/29293 "2023-06-30T09:24:53Z")

</div>

1. Describe your incident: After Upgrading to Graylog version 5.1.2 from 5.0.2 and Opensearch 2.8.0 from 2.4.1, the Graylog Dashboards threw errors like pictures below: Unable to perform search query: OpenSearch ex…

---

## [Is it possible to create highlight that contains certain word or character?](https://community.graylog.org/t/is-it-possible-to-create-highlight-that-contains-certain-word-or-character/28967)

<div class="topic-metadata">

**Author:** [@ridwansoursop](https://community.graylog.org/u/ridwansoursop)\
**Replies:** 1\
**Last updated:** [June 1, 2023, 3:29pm UTC](https://community.graylog.org/t/is-it-possible-to-create-highlight-that-contains-certain-word-or-character/28967 "2023-06-01T15:29:15Z")

</div>

1. Describe your incident: I’m trying to use highlight feature on my custom dashboard. I can highlight based on field that exactly match what the field contains. But when I try to only highlight message that contain a w…

---

## [Indices is missing with search functionality](https://community.graylog.org/t/indices-is-missing-with-search-functionality/28918)

<div class="topic-metadata">

**Author:** [@Arun](https://community.graylog.org/u/Arun)\
**Replies:** 1\
**Last updated:** [May 24, 2023, 10:03pm UTC](https://community.graylog.org/t/indices-is-missing-with-search-functionality/28918 "2023-05-24T22:03:14Z")

</div>

Indices unser the system/sidecar dropdown is missing with search functionality

---

## [How to adjust the pdf format in reports?](https://community.graylog.org/t/how-to-adjust-the-pdf-format-in-reports/28003)

<div class="topic-metadata">

**Author:** [@RefOlfer](https://community.graylog.org/u/RefOlfer)\
**Replies:** 7\
**Last updated:** [March 13, 2023, 3:15pm UTC](https://community.graylog.org/t/how-to-adjust-the-pdf-format-in-reports/28003 "2023-03-13T15:15:05Z")

</div>

Hi, I have a simple question. Is it possible to adjust the parameters in the pdf document generated by the reports? I mean page size other than A4 or US Letter, margin size, etc. Because every time Graylog is updated, …

---

## [G-chat Plugin for graylog v5?](https://community.graylog.org/t/g-chat-plugin-for-graylog-v5/27906)

<div class="topic-metadata">

**Author:** [@shivamtiwari18](https://community.graylog.org/u/shivamtiwari18)\
**Replies:** 3\
**Last updated:** [March 5, 2023, 5:38pm UTC](https://community.graylog.org/t/g-chat-plugin-for-graylog-v5/27906 "2023-03-05T17:38:59Z")

</div>

When does G-chat plugin is available for Graylog Community version 5 ? or it only available in enterprise version.

---

## [Fetching event definitions failed. Internal Server Error](https://community.graylog.org/t/fetching-event-definitions-failed-internal-server-error/27789)

<div class="topic-metadata">

**Author:** [@dleguizamon](https://community.graylog.org/u/dleguizamon)\
**Replies:** 6\
**Last updated:** [February 28, 2023, 5:18am UTC](https://community.graylog.org/t/fetching-event-definitions-failed-internal-server-error/27789 "2023-02-28T05:18:21Z")

</div>

Not sure what other tags I should be using here. After a dashboard query got stuck. Further queries failed to return any data. The server was restarted and the queries completed successfully again. However, since the…

---

## [Syslog TCP Input on localhost stopped working](https://community.graylog.org/t/syslog-tcp-input-on-localhost-stopped-working/27692)

<div class="topic-metadata">

**Author:** [@hackdefendr](https://community.graylog.org/u/hackdefendr)\
**Replies:** 7\
**Last updated:** [February 15, 2023, 10:12pm UTC](https://community.graylog.org/t/syslog-tcp-input-on-localhost-stopped-working/27692 "2023-02-15T22:12:48Z")

</div>

1. Describe your incident: I was forwarding my Suricata eve.json log file using rsyslog to send the log data to a Graylog Syslog TCP input listening on port 12201 (later changed to port 12202 for troubleshooting). This…

---

## [Regarding tuning Graylog Cluster](https://community.graylog.org/t/regarding-tuning-graylog-cluster/27715)

<div class="topic-metadata">

**Author:** [@shivamtiwari18](https://community.graylog.org/u/shivamtiwari18)\
**Replies:** 3\
**Last updated:** [February 15, 2023, 8:38am UTC](https://community.graylog.org/t/regarding-tuning-graylog-cluster/27715 "2023-02-15T08:38:18Z")

</div>

Here we have already done with the configuration part but for proper functioning of it need some guidance. we are assuming 50K messages per second, so please suggest what we need to tune in server.conf & other conf if…

---

## [Graylog Labs Video - Reference Architecture](https://community.graylog.org/t/graylog-labs-video-reference-architecture/26801)

<div class="topic-metadata">

**Author:** [@joe.gross](https://community.graylog.org/u/joe.gross)\
**Replies:** 10\
**Last updated:** [December 9, 2022, 6:52pm UTC](https://community.graylog.org/t/graylog-labs-video-reference-architecture/26801 "2022-12-09T18:52:25Z")

</div>

Howdy Graylog People, Chris Black here. Senior Solutions Engineer at Graylog. I’m very pleased to announce the first installment in a series of content that will be released under the “Graylog Labs” moniker. The content…

[Next page](https://community.graylog.org/tag/components/98.md?match_all_tags=true&page=1&tags%5B%5D=components)
