# \#gelf **URL:** https://community.graylog.org/tag/gelf/96.md [Latest](https://community.graylog.org/latest.md) · [Categories](https://community.graylog.org/categories.md) · [Tags](https://community.graylog.org/tags.md) --- ## [Local Setup with Docker Compose does not accept logs](https://community.graylog.org/t/local-setup-with-docker-compose-does-not-accept-logs/37177)
**Author:** [@Killy](https://community.graylog.org/u/Killy)\ **Replies:** 1\ **Last updated:** [April 13, 2026, 12:26pm UTC](https://community.graylog.org/t/local-setup-with-docker-compose-does-not-accept-logs/37177 "2026-04-13T12:26:34Z")
Hey there! 1. Describe your incident: I’ve followed the tutorial to get Graylog up and running using the Docker Compose set-up. I’m able to access the dashboard, and I created an HTTP GELF input On the same compute… --- ## [GELF Output feature request](https://community.graylog.org/t/gelf-output-feature-request/36978)
**Author:** [@edp](https://community.graylog.org/u/edp)\ **Replies:** 2\ **Last updated:** [February 11, 2026, 4:31pm UTC](https://community.graylog.org/t/gelf-output-feature-request/36978 "2026-02-11T16:31:26Z")
OS Information: Rocky Linux 8 Package Version: Community 6.3.8 Please add a feature to the GELF Output type to allow us to specify whether to use the default NULL BYTE record termination or NEWLINE record termination. … --- ## [Why Graylog does not collect some logs from Windows Servers?](https://community.graylog.org/t/why-graylog-does-not-collect-some-logs-from-windows-servers/35932)
**Author:** [@alesblinka](https://community.graylog.org/u/alesblinka)\ **Replies:** 0\ **Last updated:** [July 2, 2025, 2:55pm UTC](https://community.graylog.org/t/why-graylog-does-not-collect-some-logs-from-windows-servers/35932 "2025-07-02T14:55:05Z")
Hi I use Graylog pretty well, it collects logs from my Linux even Windows servers. But I have found it does not collect everything from Windows. E.g. I can see all failure even successful logons are collected. Even new … --- ## [Sending logs of different applications on graylog](https://community.graylog.org/t/sending-logs-of-different-applications-on-graylog/34722)
**Author:** [@Mazi](https://community.graylog.org/u/Mazi)\ **Replies:** 4\ **Last updated:** [January 27, 2025, 2:52pm UTC](https://community.graylog.org/t/sending-logs-of-different-applications-on-graylog/34722 "2025-01-27T14:52:17Z")
Hello every body, i have recently installed graylog ( graylog6.1 on ubuntu ) and every thing works fine as i will. In our local netwerk we have different applications that have thier own log files and some of them are s… --- ## [I have 2 issues with GELF HTTP](https://community.graylog.org/t/i-have-2-issues-with-gelf-http/34650)
**Author:** [@FingerlessGloves](https://community.graylog.org/u/FingerlessGloves)\ **Replies:** 2\ **Last updated:** [January 20, 2025, 7:07am UTC](https://community.graylog.org/t/i-have-2-issues-with-gelf-http/34650 "2025-01-20T07:07:45Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Sysmon and Windows Defender](https://community.graylog.org/t/sysmon-and-windows-defender/34567)
**Author:** [@xxlt3xx](https://community.graylog.org/u/xxlt3xx)\ **Replies:** 3\ **Last updated:** [January 6, 2025, 7:16pm UTC](https://community.graylog.org/t/sysmon-and-windows-defender/34567 "2025-01-06T19:16:39Z")
So currently I’m replacing our old graylog server, we implemented windows defender and now we’re not getting data. So we are rebuilding from scratch as I got Ubuntu 24.04 LTS installed I’m wondering is it possible to run… --- ## [Proccess Buffer Full, Slow Output, Journaling](https://community.graylog.org/t/proccess-buffer-full-slow-output-journaling/33780)
**Author:** [@fsv](https://community.graylog.org/u/fsv)\ **Replies:** 7\ **Last updated:** [October 8, 2024, 11:44am UTC](https://community.graylog.org/t/proccess-buffer-full-slow-output-journaling/33780 "2024-10-08T11:44:06Z")
We are using Graylog 6.x on CentOS. This specific node has 24 CPUs and 24GB RAM on an SSD storage and is part of a 3 node Graylog cluster where each node is also a Mongo node. There is no load balancing in play here, … --- ## [Messages are lost when sending via udp/tcp gelf](https://community.graylog.org/t/messages-are-lost-when-sending-via-udp-tcp-gelf/33549)
**Author:** [@Aleksandr](https://community.graylog.org/u/Aleksandr)\ **Replies:** 5\ **Last updated:** [September 29, 2024, 2:34pm UTC](https://community.graylog.org/t/messages-are-lost-when-sending-via-udp-tcp-gelf/33549 "2024-09-29T14:34:06Z")
1. Describe your incident: I’m load testing Graylog. I use local deployment of components on my computer. Docker-compose is used to run Graylog locally version: "3.8" services: mongodb: image: "mongo:4.4.6" … --- ## [Graylog does not show log received via UDP correctly](https://community.graylog.org/t/graylog-does-not-show-log-received-via-udp-correctly/33177)
**Author:** [@brendo1720](https://community.graylog.org/u/brendo1720)\ **Replies:** 3\ **Last updated:** [August 5, 2024, 8:37am UTC](https://community.graylog.org/t/graylog-does-not-show-log-received-via-udp-correctly/33177 "2024-08-05T08:37:37Z")
Using Graylog 5.0, I am sending the log from an application via UDP and all the logs sent are arriving in graylog, but not all of them are being “interpreted”. The json I am sending: { "version": "1.1", "host": "test",… --- ## [Gelf Https certificate chain is not valid](https://community.graylog.org/t/gelf-https-certificate-chain-is-not-valid/32281)
**Author:** [@innominate227](https://community.graylog.org/u/innominate227)\ **Replies:** 1\ **Last updated:** [May 1, 2024, 3:16pm UTC](https://community.graylog.org/t/gelf-https-certificate-chain-is-not-valid/32281 "2024-05-01T15:16:34Z")
I am unable to setup a GELF HTTP input using tls. I was able to secure the graylog web interface using this guide. I thought I should be able to use the same key and cert file to secure a GELF HTTP input. However when th… --- ## [Throttling Requests](https://community.graylog.org/t/throttling-requests/32263)
**Author:** [@sha2048](https://community.graylog.org/u/sha2048)\ **Replies:** 0\ **Last updated:** [April 30, 2024, 11:39am UTC](https://community.graylog.org/t/throttling-requests/32263 "2024-04-30T11:39:56Z")
Hey! :wave: I’m looking for a good solution to throttle messages when graylog is flooded. We have a situation where our message per second are usually around 2k, but sometimes we enable more logging for a small period … --- ## [How to receive Logs from Nodes](https://community.graylog.org/t/how-to-receive-logs-from-nodes/32254)
**Author:** [@yardtheyard](https://community.graylog.org/u/yardtheyard)\ **Replies:** 5\ **Last updated:** [April 29, 2024, 4:36pm UTC](https://community.graylog.org/t/how-to-receive-logs-from-nodes/32254 "2024-04-29T16:36:14Z")
1. Describe your incident: I need to set up GrayLog for my apprentice ship. So its just for documentation and skill proofing purposes. I have set up the GUI and now have 3 simple Debian systems wich I want to collect so… --- ## [No such index in Dashboard](https://community.graylog.org/t/no-such-index-in-dashboard/32008)
**Author:** [@Nifleheim](https://community.graylog.org/u/Nifleheim)\ **Replies:** 3\ **Last updated:** [April 2, 2024, 4:58am UTC](https://community.graylog.org/t/no-such-index-in-dashboard/32008 "2024-04-02T04:58:30Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [Getting Windows Logs into GrayLog Process?](https://community.graylog.org/t/getting-windows-logs-into-graylog-process/31848)
**Author:** [@GL1](https://community.graylog.org/u/GL1)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 5:32pm UTC](https://community.graylog.org/t/getting-windows-logs-into-graylog-process/31848 "2024-03-19T17:32:24Z")
1. Describe your incident: I’m completely new to the GrayLog process, so please bare with me. I was finally able to setup the “centralized” GrayLog Server (5.0) on a Ubuntu Linux Server. However, I’m onto the next part… --- ## [Delay while getting log via gelf http](https://community.graylog.org/t/delay-while-getting-log-via-gelf-http/31660)
**Author:** [@shotarry](https://community.graylog.org/u/shotarry)\ **Replies:** 2\ **Last updated:** [March 1, 2024, 1:08pm UTC](https://community.graylog.org/t/delay-while-getting-log-via-gelf-http/31660 "2024-03-01T13:08:39Z")
Hello I’m sending some json text from one server to another. Using this script: curl -X POST -H ‘Content-Type: application/json’ -d ‘{ “version”: “1.1”, “host”: “example”, “short\_message”: “A short message”, “level”: … --- ## [Problem with Graylog 4.3.15 in Kubernetes cluster](https://community.graylog.org/t/problem-with-graylog-4-3-15-in-kubernetes-cluster/31630)
**Author:** [@ferdagon](https://community.graylog.org/u/ferdagon)\ **Replies:** 6\ **Last updated:** [March 1, 2024, 8:25am UTC](https://community.graylog.org/t/problem-with-graylog-4-3-15-in-kubernetes-cluster/31630 "2024-03-01T08:25:29Z")
1. Describe your incident: Good morning, first of all thank you for your help, we are having constant errors in gelf http & TCP type inputs, I leave you a screenshot of the errors. 2. Describe your environment: OS I… --- ## [Howe to remove control characters from GELF output?](https://community.graylog.org/t/howe-to-remove-control-characters-from-gelf-output/31355)
**Author:** [@catyBlack](https://community.graylog.org/u/catyBlack)\ **Replies:** 3\ **Last updated:** [January 30, 2024, 6:49pm UTC](https://community.graylog.org/t/howe-to-remove-control-characters-from-gelf-output/31355 "2024-01-30T18:49:40Z")
Hello, I have the following problem. I am using a Graylog open 4.1 on a Debian. Graylog receives syslogs from several Windows clients and should forward them. The input works great, but the problem lies in the output. Th… --- ## [Sending log from Android to Graylog](https://community.graylog.org/t/sending-log-from-android-to-graylog/30663)
**Author:** [@wilsonshow](https://community.graylog.org/u/wilsonshow)\ **Replies:** 2\ **Last updated:** [November 22, 2023, 5:34am UTC](https://community.graylog.org/t/sending-log-from-android-to-graylog/30663 "2023-11-22T05:34:35Z")
Would like to know if it is possible to send Android to Graylog? I had currently extract out the my Android log from logcat and save it as a text file. How will I be able to send over to my graylog server? In additional… --- ## [GELF Message validation - error has empty mandatory "short\_message" field](https://community.graylog.org/t/gelf-message-validation-error-has-empty-mandatory-short-message-field/30723)
**Author:** [@devender](https://community.graylog.org/u/devender)\ **Replies:** 1\ **Last updated:** [November 21, 2023, 5:29am UTC](https://community.graylog.org/t/gelf-message-validation-error-has-empty-mandatory-short-message-field/30723 "2023-11-21T05:29:08Z")
Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describ… --- ## [GELF input truncate message to 1064 bytes](https://community.graylog.org/t/gelf-input-truncate-message-to-1064-bytes/30075)
**Author:** [@mobarzik](https://community.graylog.org/u/mobarzik)\ **Replies:** 5\ **Last updated:** [September 13, 2023, 9:12am UTC](https://community.graylog.org/t/gelf-input-truncate-message-to-1064-bytes/30075 "2023-09-13T09:12:13Z")
Hello ! I’m trying to transfer logs from syslog-ng to graylog via tcp. First, I used syslog-ng’s “syslog” output to transfer logs to graylog. However, my logs were cut to 1064 bytes. Reading the documentation, I found … --- ## [Windows GELF Input not working - zlib compressed stream](https://community.graylog.org/t/windows-gelf-input-not-working-zlib-compressed-stream/30030)
**Author:** [@Johnny](https://community.graylog.org/u/Johnny)\ **Replies:** 3\ **Last updated:** [September 7, 2023, 9:54pm UTC](https://community.graylog.org/t/windows-gelf-input-not-working-zlib-compressed-stream/30030 "2023-09-07T21:54:22Z")
1. Describe your incident: Windows GELF Input not working - zlib compressed stream I have an existing Graylog running version 4.2.4 and stood up a new box to take its place running 5.1.4. I used all the same input sett… --- ## [HTTP GELF input and HTTP Keep-Alive](https://community.graylog.org/t/http-gelf-input-and-http-keep-alive/29486)
**Author:** [@mmaFR](https://community.graylog.org/u/mmaFR)\ **Replies:** 3\ **Last updated:** [July 28, 2023, 4:34pm UTC](https://community.graylog.org/t/http-gelf-input-and-http-keep-alive/29486 "2023-07-28T16:34:28Z")
Hello, I installed a graylog server and I use a GELF HTTP input behind an HAProxy instance. I noticed that a lot of message are dropped as soon as I use the HTTP-Keep-Alive. As soon I disable that, 100% of my messages… --- ## [How to view stacktrace in Graylog](https://community.graylog.org/t/how-to-view-stacktrace-in-graylog/29228)
**Author:** [@MacKnight](https://community.graylog.org/u/MacKnight)\ **Replies:** 4\ **Last updated:** [June 28, 2023, 1:43pm UTC](https://community.graylog.org/t/how-to-view-stacktrace-in-graylog/29228 "2023-06-28T13:43:13Z")
No stack trace from GELF UDP transport. We are using a Winston logger. ubuntu-20.04-server-20220607 - Kubernetes cluster v1 Package Version: graylog:5.0 env: - name: OPENSEARCH\_JAVA\_OPTS value: -Xms1g -Xmx1g … --- ## [Home cyber range](https://community.graylog.org/t/home-cyber-range/28915)
**Author:** [@ioptrix](https://community.graylog.org/u/ioptrix)\ **Replies:** 4\ **Last updated:** [May 24, 2023, 10:05pm UTC](https://community.graylog.org/t/home-cyber-range/28915 "2023-05-24T22:05:57Z")
I was trying to create a cyber range in the university, using 2 physical machines and one TP-Link switch (and router, but without results even with it). I have one side/machine (defensive) with graylog, elasticsearch and… --- ## [Using GELF with Powershell](https://community.graylog.org/t/using-gelf-with-powershell/28808)
**Author:** [@JDobbsy1987](https://community.graylog.org/u/JDobbsy1987)\ **Replies:** 1\ **Last updated:** [May 17, 2023, 10:22am UTC](https://community.graylog.org/t/using-gelf-with-powershell/28808 "2023-05-17T10:22:29Z")
Hi, I have recently installed Graylog 5.0 using Docker-Compose. I am able to send logs to it and see them appear but the data isn’t parsed, from what i have understood, when using GELF it should automtaically parse the… --- ## [Compounds with different value after extraction](https://community.graylog.org/t/compounds-with-different-value-after-extraction/28737)
**Author:** [@isotecviac2022](https://community.graylog.org/u/isotecviac2022)\ **Replies:** 7\ **Last updated:** [May 14, 2023, 6:39pm UTC](https://community.graylog.org/t/compounds-with-different-value-after-extraction/28737 "2023-05-14T18:39:47Z")
1. Describe your incident: Hello forum, Has anyone gone through this issue? I’m ingesting windows logs via gelf/udp with NXLog. But some fields are strange. Notice that the “Direction” and “LayerName” fields are dif… --- ## [GELF TCP and RAW TCP - NXLOG and GRAYLOG](https://community.graylog.org/t/gelf-tcp-and-raw-tcp-nxlog-and-graylog/28727)
**Author:** [@Malcolm](https://community.graylog.org/u/Malcolm)\ **Replies:** 2\ **Last updated:** [May 10, 2023, 12:01pm UTC](https://community.graylog.org/t/gelf-tcp-and-raw-tcp-nxlog-and-graylog/28727 "2023-05-10T12:01:52Z")
Hi, I’m using graylog 5.0.6 on Debian 11. I want to collect allf of the eventlog from a Windows server. I installed the nxlog community agent on it. If I configure my Input on “RAW TCP” I’m collecting a lot of informa… --- ## [Extract PowerDNS log data from PowerDNS logs](https://community.graylog.org/t/extract-powerdns-log-data-from-powerdns-logs/28386)
**Author:** [@SarikTech](https://community.graylog.org/u/SarikTech)\ **Replies:** 0\ **Last updated:** [April 9, 2023, 8:35am UTC](https://community.graylog.org/t/extract-powerdns-log-data-from-powerdns-logs/28386 "2023-04-09T08:35:29Z")
My extractor pattern to take PowerDNS logs info from PowerDNS logs --- ## [Some Windows event logs not showing in Graylog](https://community.graylog.org/t/some-windows-event-logs-not-showing-in-graylog/27095)
**Author:** [@Chase](https://community.graylog.org/u/Chase)\ **Replies:** 10\ **Last updated:** [January 4, 2023, 1:49pm UTC](https://community.graylog.org/t/some-windows-event-logs-not-showing-in-graylog/27095 "2023-01-04T13:49:49Z")
We are having problems where some, but not all of our windows event logs are not showing up in graylog. We are running nxlog, to send all the event logs. We have two syslog servers as well, one is graylog, and another … --- ## [Rsyslog app name](https://community.graylog.org/t/rsyslog-app-name/27053)
**Author:** [@miki22](https://community.graylog.org/u/miki22)\ **Replies:** 3\ **Last updated:** [December 29, 2022, 7:26pm UTC](https://community.graylog.org/t/rsyslog-app-name/27053 "2022-12-29T19:26:52Z")
Hello, I’ve configured RHEL 7 to send /var/log/messages and /var/log/secure to Graylog. How do i configure specific fields in Graylog to show the log origin? i’d like to distinguish between those logs, and have a sepa… [Next page](https://community.graylog.org/tag/gelf/96.md?match_all_tags=true&page=1&tags%5B%5D=gelf)