🎄 Happy Holidays! 🥳
Most of Solace is closed December 24–January 1 so our employees can spend time with their families. We will re-open Thursday, January 2, 2024. Please expect slower response times during this period and open a support ticket for anything needing immediate assistance.
Happy Holidays!
Please note: most of Solace is closed December 25–January 2, and will re-open Tuesday, January 3, 2023.
Graylog Content Pack
Comments
-
Hi @David Fung,
I'm not aware of a Graylog content pack, but Solace does have the ability to choose a graylog output format for the logs if you're using docker/kubernetes. You can check that out here. At least it should hopefully make the log parsing a bit simpler!I'll socialize internally and see if anyone is aware of a Graylog content pack but we'd also love it if you share what you come up with
-Marc
0 -
I'm not really sure what a Graylog content pack is, or how it would be used in a Solace context, but we do have online documentation that describes all of the various logging that the broker puts out: https://docs.solace.com/Solace-PubSub-Event-Reference/event_ref_boiler.html
All of these broker logs can be output via Syslog forwarding, and received by logging components that could convert into GELF, e.g.:
0 -
Thanks for all of your inputs. We setup a syslog server to consolidate the Solace logs (software VM + hardware appliances) and then translate it to JSON format before forwarding it to Graylog. Using Grafana as a dashboard to monitor Solace activities.
Good example on pfSense + Graylog : https://marketplace.graylog.org/addons/6257909f-5244-4a37-869e-0470dc3ee37f
2
