Graylog Content Pack
Comments
-
Hi @David Fung,
I'm not aware of a Graylog content pack, but Solace does have the ability to choose a graylog output format for the logs if you're using docker/kubernetes. You can check that out here. At least it should hopefully make the log parsing a bit simpler!I'll socialize internally and see if anyone is aware of a Graylog content pack but we'd also love it if you share what you come up with
-Marc
0 -
I'm not really sure what a Graylog content pack is, or how it would be used in a Solace context, but we do have online documentation that describes all of the various logging that the broker puts out: https://docs.solace.com/Solace-PubSub-Event-Reference/event_ref_boiler.html
All of these broker logs can be output via Syslog forwarding, and received by logging components that could convert into GELF, e.g.:
0 -
Thanks for all of your inputs. We setup a syslog server to consolidate the Solace logs (software VM + hardware appliances) and then translate it to JSON format before forwarding it to Graylog. Using Grafana as a dashboard to monitor Solace activities.
Good example on pfSense + Graylog : https://marketplace.graylog.org/addons/6257909f-5244-4a37-869e-0470dc3ee37f
2
