# \#documentation **URL:** https://community.graylog.org/tag/documentation/15.md [Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md) --- ## [Input Access Managment/Extractor Access for non-admin users](https://community.graylog.org/t/input-access-managment-extractor-access-for-non-admin-users/36085)
**Author:** [@Unit19834](https://community.graylog.org/u/Unit19834)\ **Replies:** 1\ **Last updated:** [July 28, 2025, 11:29am UTC](https://community.graylog.org/t/input-access-managment-extractor-access-for-non-admin-users/36085 "2025-07-28T11:29:07Z")
1. Describe your incident: Hello everyone, We are currently in the process of evaluating graylog-open as an LMS for multiple teams. This also means we use non-admin users who are assigned the appropriate roles so that … --- ## [What are the best practices for maximizing the value of log data?](https://community.graylog.org/t/what-are-the-best-practices-for-maximizing-the-value-of-log-data/36014)
**Author:** [@Kalinovka](https://community.graylog.org/u/Kalinovka)\ **Replies:** 3\ **Last updated:** [July 21, 2025, 2:21pm UTC](https://community.graylog.org/t/what-are-the-best-practices-for-maximizing-the-value-of-log-data/36014 "2025-07-21T14:21:43Z")
Hi, I’m currently working with Graylog, which contains log data from both Linux and Windows machines. I’ve been able to create streams, alerts, and dashboards etc but I’m struggling to find other ways to better leverage… --- ## [Why is it a problem to have GrayLog and the Data Node on the same machine?](https://community.graylog.org/t/why-is-it-a-problem-to-have-graylog-and-the-data-node-on-the-same-machine/35342)
**Author:** [@petit0C](https://community.graylog.org/u/petit0C)\ **Replies:** 2\ **Last updated:** [April 1, 2025, 6:56am UTC](https://community.graylog.org/t/why-is-it-a-problem-to-have-graylog-and-the-data-node-on-the-same-machine/35342 "2025-04-01T06:56:00Z")
Hi, I’m new to GrayLog (not even actually a user, yet) and still considering my options. 1. Describe your incident: It’s not an incident per-se. Given the modest size of our environment we would like to install all com… --- ## [Graylog + elasticsearch + kibana](https://community.graylog.org/t/graylog-elasticsearch-kibana/35301)
**Author:** [@saulo.neiva](https://community.graylog.org/u/saulo.neiva)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 10:07pm UTC](https://community.graylog.org/t/graylog-elasticsearch-kibana/35301 "2025-03-25T22:07:37Z")
A ultima versão do graylog suporta o elasticsearch? Helpful Posting Tips: Tips for Posting Questions that Get Answers \[Hold down CTRL and link on link to open tips documents in a separate tab\] --- ## [Graylog - Vendor Risk Assessment Documentation](https://community.graylog.org/t/graylog-vendor-risk-assessment-documentation/34622)
**Author:** [@ak99](https://community.graylog.org/u/ak99)\ **Replies:** 10\ **Last updated:** [January 23, 2025, 8:14am UTC](https://community.graylog.org/t/graylog-vendor-risk-assessment-documentation/34622 "2025-01-23T08:14:46Z")
Hello, My organization is currently utilizing Graylog Open and we were looking for Security Documentation to support performing a Vendor Risk Assessment of Graylog. A Vendor Risk Assessment is necessary for us to conti… --- ## [Documentation for GrayLog upgradation from 5.x version to 6.x version on Multinode Cluster environment (Ubuntu)](https://community.graylog.org/t/documentation-for-graylog-upgradation-from-5-x-version-to-6-x-version-on-multinode-cluster-environment-ubuntu/34691)
**Author:** [@Raju](https://community.graylog.org/u/Raju)\ **Replies:** 0\ **Last updated:** [January 15, 2025, 4:21pm UTC](https://community.graylog.org/t/documentation-for-graylog-upgradation-from-5-x-version-to-6-x-version-on-multinode-cluster-environment-ubuntu/34691 "2025-01-15T16:21:28Z")
Hi Team, I’m new to Graylog Environment!!! Looking for Documentation to upgrade Graylog from 5.x version to 6.x version on Multiple nodes ( Cluster Environment) and these Nodes are running on Ubuntu OS. and, what are … --- ## [How to setup a minimum gralog6.x Cluster step by step](https://community.graylog.org/t/how-to-setup-a-minimum-gralog6-x-cluster-step-by-step/34431)
**Author:** [@R1310328554](https://community.graylog.org/u/R1310328554)\ **Replies:** 4\ **Last updated:** [December 13, 2024, 3:34am UTC](https://community.graylog.org/t/how-to-setup-a-minimum-gralog6-x-cluster-step-by-step/34431 "2024-12-13T03:34:20Z")
1. Describe your incident: setup a minimun gralog6.x Cluster 2. Describe your environment: OS Information: redhat9.1 x86\_64 Package Version: 6.1.3 Service logs, configurations, and environment variables: … --- ## [Docs still mention is\_master instead of is\_leader](https://community.graylog.org/t/docs-still-mention-is-master-instead-of-is-leader/34284)
**Author:** [@evert](https://community.graylog.org/u/evert)\ **Replies:** 0\ **Last updated:** [November 26, 2024, 12:00pm UTC](https://community.graylog.org/t/docs-still-mention-is-master-instead-of-is-leader/34284 "2024-11-26T12:00:26Z")
I noticed that Initial Configuration Settings still refers to is\_master instead of is\_leader, even for Graylog 6.1 --- ## [Graylog-datanode curl commands](https://community.graylog.org/t/graylog-datanode-curl-commands/33948)
**Author:** [@mcury](https://community.graylog.org/u/mcury)\ **Replies:** 4\ **Last updated:** [October 29, 2024, 2:28pm UTC](https://community.graylog.org/t/graylog-datanode-curl-commands/33948 "2024-10-29T14:28:22Z")
1. Describe your incident: I’m using the Rotation & Retention legacy option, to close indexes and not delete them, it is working as expected. When I was using opensearch, I used to delete closed indexes after sometime … --- ## [Calculating IOPS values](https://community.graylog.org/t/calculating-iops-values/33826)
**Author:** [@huimin](https://community.graylog.org/u/huimin)\ **Replies:** 1\ **Last updated:** [October 11, 2024, 9:45am UTC](https://community.graylog.org/t/calculating-iops-values/33826 "2024-10-11T09:45:25Z")
1. Describe your incident: I am trying to calculate IOPS values based on the table of values at this documentation link: Planning Your Deployment. A formula is provided (IOPs=(MB/sec x 106)/Block-size in bytes), but I am… --- ## [Filter logs Received](https://community.graylog.org/t/filter-logs-received/32977)
**Author:** [@badaroed](https://community.graylog.org/u/badaroed)\ **Replies:** 3\ **Last updated:** [July 25, 2024, 3:46am UTC](https://community.graylog.org/t/filter-logs-received/32977 "2024-07-25T03:46:08Z")
Gentlemen, what’s up? Is there any way to filter the logs received in Graylog? I’m asking because of my scenario, where I’m receiving logs from Vmware EXSI, and there are a lot of them every day… which quickly fills up… --- ## [Add new Data Nodes to Existing Deployment](https://community.graylog.org/t/add-new-data-nodes-to-existing-deployment/32874)
**Author:** [@cody](https://community.graylog.org/u/cody)\ **Replies:** 1\ **Last updated:** [July 2, 2024, 6:13am UTC](https://community.graylog.org/t/add-new-data-nodes-to-existing-deployment/32874 "2024-07-02T06:13:58Z")
1. Describe your incident: Currenty, my Graylog deployment consists of a Graylog Node and Data Node on the same virtual machine. Ideally, now that I’ve got everything setup the way I like it, I would like to add an addi… --- ## [Updatepath to 5.X](https://community.graylog.org/t/updatepath-to-5-x/32867)
**Author:** [@forodrim](https://community.graylog.org/u/forodrim)\ **Replies:** 1\ **Last updated:** [June 28, 2024, 2:28pm UTC](https://community.graylog.org/t/updatepath-to-5-x/32867 "2024-06-28T14:28:03Z")
for some reasons we are still on version.3,0 are there any guides, how to updateto the latest version? what will break? will the inputs still work? 1. Describe your incident: 2. Describe your environment: currentl… --- ## [Pipeline performance optimization and metrics](https://community.graylog.org/t/pipeline-performance-optimization-and-metrics/32528)
**Author:** [@CJRoss](https://community.graylog.org/u/CJRoss)\ **Replies:** 2\ **Last updated:** [May 28, 2024, 3:52pm UTC](https://community.graylog.org/t/pipeline-performance-optimization-and-metrics/32528 "2024-05-28T15:52:46Z")
Instead of attempting to upgrade my 5.x server I created a new 6.0 server and I’m going through and reworking my pipelines and rules now that I’m a bit more familiar with Graylog. I’m also working on learning the rule w… --- ## [HOW TO: AbuseIPDB lookup setup](https://community.graylog.org/t/how-to-abuseipdb-lookup-setup/32508)
**Author:** [@jonathanb](https://community.graylog.org/u/jonathanb)\ **Replies:** 0\ **Last updated:** [May 23, 2024, 9:12am UTC](https://community.graylog.org/t/how-to-abuseipdb-lookup-setup/32508 "2024-05-23T09:12:04Z")
I have seen snippets, etc, on how to look up AbuseIPDB but not end to end, so I thought I would write an article on how to. With this setup, you will be able to look up from the AbuseIPDB API system the score on an IP a… --- ## [Graylog Test Scenarios](https://community.graylog.org/t/graylog-test-scenarios/32468)
**Author:** [@laruz](https://community.graylog.org/u/laruz)\ **Replies:** 1\ **Last updated:** [May 20, 2024, 3:57pm UTC](https://community.graylog.org/t/graylog-test-scenarios/32468 "2024-05-20T15:57:59Z")
Hello Guys! newbie here. Graylog Enterprise 5.2.7 Enterprise: 2 nodes Mongodb 6.0.14: 3 nodes Opensearch 2.12: 3 nodes Graylog/mongodb: Ubuntu 22.04 Opensearch: RHEL 8.9 I am making a document to simulate all test… --- ## [I can't receive any logs](https://community.graylog.org/t/i-cant-receive-any-logs/32385)
**Author:** [@benashour](https://community.graylog.org/u/benashour)\ **Replies:** 1\ **Last updated:** [May 18, 2024, 2:58am UTC](https://community.graylog.org/t/i-cant-receive-any-logs/32385 "2024-05-18T02:58:47Z")
I completed everything correctly and the server is running. I tried to add something to receive the log from it, but I did not receive anything. Can someone help me? --- ## [Graylog 5.2 Question: Active Directory & TLS Options](https://community.graylog.org/t/graylog-5-2-question-active-directory-tls-options/32367)
**Author:** [@spardok](https://community.graylog.org/u/spardok)\ **Replies:** 0\ **Last updated:** [May 11, 2024, 12:00am UTC](https://community.graylog.org/t/graylog-5-2-question-active-directory-tls-options/32367 "2024-05-11T00:00:47Z")
1. Describe your incident: Not an incident, just a question of how these two options work. I do not see any information regarding these authentication options in Graylog’s Docs. Nor can I seem to find any details in the… --- ## [Why is the installation guide so confusing?](https://community.graylog.org/t/why-is-the-installation-guide-so-confusing/32251)
**Author:** [@mattimac](https://community.graylog.org/u/mattimac)\ **Replies:** 1\ **Last updated:** [April 29, 2024, 4:58pm UTC](https://community.graylog.org/t/why-is-the-installation-guide-so-confusing/32251 "2024-04-29T16:58:59Z")
Assume im not familiar with Graylog. Simplest setup - single node, ubuntu 22.04.4 LTS I have trouble starting the most basic Graylog config, doc is confusing. How can i know which Graylog version i should choose? Not… --- ## [How to receive Logs from Nodes](https://community.graylog.org/t/how-to-receive-logs-from-nodes/32254)
**Author:** [@yardtheyard](https://community.graylog.org/u/yardtheyard)\ **Replies:** 5\ **Last updated:** [April 29, 2024, 4:36pm UTC](https://community.graylog.org/t/how-to-receive-logs-from-nodes/32254 "2024-04-29T16:36:14Z")
1. Describe your incident: I need to set up GrayLog for my apprentice ship. So its just for documentation and skill proofing purposes. I have set up the GUI and now have 3 simple Debian systems wich I want to collect so… --- ## [Kubernetes Deployment and Data Nodes](https://community.graylog.org/t/kubernetes-deployment-and-data-nodes/32069)
**Author:** [@bogd](https://community.graylog.org/u/bogd)\ **Replies:** 0\ **Last updated:** [April 10, 2024, 7:03am UTC](https://community.graylog.org/t/kubernetes-deployment-and-data-nodes/32069 "2024-04-10T07:03:24Z")
My apologies if this post does not follow the “standard” message format, but it is not a bug report. I am just looking for documentation/advice/best practices. I am looking to deploy a small (test) Graylog instance on K… --- ## [Need Help On Complete Run process of Graylog2-server after completion of build process](https://community.graylog.org/t/need-help-on-complete-run-process-of-graylog2-server-after-completion-of-build-process/31951)
**Author:** [@Raz-48](https://community.graylog.org/u/Raz-48)\ **Replies:** 4\ **Last updated:** [April 8, 2024, 9:51pm UTC](https://community.graylog.org/t/need-help-on-complete-run-process-of-graylog2-server-after-completion-of-build-process/31951 "2024-04-08T21:51:31Z")
hi… I have completed the build process with followed commands mvn compile mvn package i am totally beginer in graylog2-server version 5.2.2 and i don’t know how exactly run the application locally on ubuntu --- ## [Search API Endpoint - Good practices](https://community.graylog.org/t/search-api-endpoint-good-practices/31273)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 2\ **Last updated:** [January 24, 2024, 10:05am UTC](https://community.graylog.org/t/search-api-endpoint-good-practices/31273 "2024-01-24T10:05:37Z")
Hi, I’m currently used to run automation with scripts making use of the following endpoints: /search/universal/absolute /search/universal/relative Those endpoints are marked as Legacy so their usage should be avoided… --- ## [Implementing TLS - Step by Step](https://community.graylog.org/t/implementing-tls-step-by-step/31101)
**Author:** [@Tranbo](https://community.graylog.org/u/Tranbo)\ **Replies:** 2\ **Last updated:** [January 2, 2024, 4:07am UTC](https://community.graylog.org/t/implementing-tls-step-by-step/31101 "2024-01-02T04:07:08Z")
I am using latest infos as of 12/31/2023 - from the doc create by Drew Miranda HOW-TO GUIDE: SECURING GRAYLOG WITH TLS I am getting this error from the server.log 2024-01-01T18:53:42.398-08:00 ERROR \[AuditLogger\] Una… --- ## [HTTP credential request - why?](https://community.graylog.org/t/http-credential-request-why/30704)
**Author:** [@EVOsupport](https://community.graylog.org/u/EVOsupport)\ **Replies:** 2\ **Last updated:** [December 7, 2023, 7:05pm UTC](https://community.graylog.org/t/http-credential-request-why/30704 "2023-12-07T19:05:37Z")
Hi all, I could use a helping hand. I’m setting up a Graylog server with Opensearch 2.10.0 and MongoDB 6.0. The configuration I’m doing is basic and I don’t need the ssl protocol when I connect to the server as it’s ins… --- ## [Graylog will not start after upgrade fron 5.1 to 5.2 - Opensearch Fails to Start](https://community.graylog.org/t/graylog-will-not-start-after-upgrade-fron-5-1-to-5-2-opensearch-fails-to-start/30621)
**Author:** [@secdoc](https://community.graylog.org/u/secdoc)\ **Replies:** 4\ **Last updated:** [November 10, 2023, 9:57pm UTC](https://community.graylog.org/t/graylog-will-not-start-after-upgrade-fron-5-1-to-5-2-opensearch-fails-to-start/30621 "2023-11-10T21:57:00Z")
1. Describe your incident: Previously running Graylog Open 5.1. I upgraded to 5.2 following the docs. After doing the obligatory reboot, thew WebUI no longer pulls up now getting the following errors 2. Describe your e… --- ## [Embedding external content](https://community.graylog.org/t/embedding-external-content/30486)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 0\ **Last updated:** [October 27, 2023, 4:22pm UTC](https://community.graylog.org/t/embedding-external-content/30486 "2023-10-27T16:22:34Z")
Hi, I’m trying to find a way to embed external content inside graylog. I developped a graylog plugin embedding an iframe. However the content security policy prevent the iframe to be loaded and it seems not configurab… --- ## [\[PLUGIN\] Set a configuration section](https://community.graylog.org/t/plugin-set-a-configuration-section/30362)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 1\ **Last updated:** [October 17, 2023, 10:25pm UTC](https://community.graylog.org/t/plugin-set-a-configuration-section/30362 "2023-10-17T22:25:59Z")
Hi ! I’m trying develop a configuration section in my plugin. The configuration section is shown but my “edit configuration” button does not show the bootstrap modal on click. In fact nothing happen and no javascript e… --- ## [How to set date while creating index rotating strategy in time](https://community.graylog.org/t/how-to-set-date-while-creating-index-rotating-strategy-in-time/30199)
**Author:** [@Bee8080](https://community.graylog.org/u/Bee8080)\ **Replies:** 2\ **Last updated:** [October 6, 2023, 10:40am UTC](https://community.graylog.org/t/how-to-set-date-while-creating-index-rotating-strategy-in-time/30199 "2023-10-06T10:40:26Z")
Hello Community, I wanted to set index prefix with something like graylog\_alert\_MM\_DD\_YYYY for everyday since it rotates but until now i have only achieved graylog\_alert\_0, next day graylog\_alert\_1. I want to do someth… --- ## [\[PLUGIN\] Customizable configuration](https://community.graylog.org/t/plugin-customizable-configuration/29990)
**Author:** [@weird-oecophylla](https://community.graylog.org/u/weird-oecophylla)\ **Replies:** 0\ **Last updated:** [September 4, 2023, 11:52am UTC](https://community.graylog.org/t/plugin-customizable-configuration/29990 "2023-09-04T11:52:34Z")
Hi, I’m developping a plugin for graylog and I would need the user to store it’s token into it in order to automate some interactions with the graylog’s API. Do you know any way to store such kind of settings through a… [Next page](https://community.graylog.org/tag/documentation/15.md?match_all_tags=true&page=1&tags%5B%5D=documentation)