Graylog Node

Feature Requests Nodes
1

Graylog https://www.graylog.org/ is a very common logging server and can be setup rather quickly with containers. It has many ways to connect to it, including sending syslog remotely, using gelf messages and lots more. Having this as a node would be extremely helpful.

2

Thanks a lot. Can you please tell us what functionality you would require exactly. Just to be sure that if this node gets created it does already what you need it to do.

1 Like
3

I think the best way to look at it is a GELF message sender, with a graylog server as crendetials.

GELF is described here GELF

The most important bits:

Every log message in GELF is a dict with the following fields:

  • host (the creator of the message)
  • timestamp
  • version
  • long and short version of the message
  • other custom fields you can freely configure on your own

Among those custom fields is usual a “level” for the log, values from 0 to 6, where 0 is the highest importance error level, but this is optional in GELF.

4

Ah OK. So the only functionality you would really require would be sending a log-message?

5

Sending to Graylog would be my personal use case.

I think reading from graylog would be a future thing that might be interesting as well I think, specially since many things can talk to graylog, but graylog also can do things like send alerts (use it as triggers).

As a side note in case you are not familiar with graylog: Below the surface it has an Elasticsearch backend, and uses pretty much most of the syntax from ES as well, so if you make an ES node, that would also be possible to share some code with querying Graylog as well.

1 Like
6

Hi @jan
So maybe this would be better called a Graylog publishing node, not anything else.
Are you looking into making this or is this not something you’d want to do?

7

Hello @jan is there any update on this? Or did you drop the idea of making it?

8

Hello @ChristianRiesen

We do not drop nodes, but we have so many requests that we usually develop them based on the community’s votes. We have quite some nodes to build before this one. What I can assure it’s it will be developed do not now when thought.

1 Like
9

That’s fantastic news, thank you. And I understand prioritizing things. Graylog is such an integral part for me that it’s hard to have things running I can’t integrate directly :slight_smile:

10

In the meantime you can use the HTTP Request node though.