Graylog - Inputs

There should be at least two Graylog input configured to monitor application logs and database errors.

Input details are showned below. You can configure the ports, buffer sizes etc. by regarding to the your graylog resources.

1. All Dengage Services (Gelf UDP)

image.png


2. Database Errors (Beats)

image.png

For Database Errors please import the following extractor to the input.

{
  "extractors": [
    {
      "title": "Postgres Error Extractor",
      "extractor_type": "copy_input",
      "converters": [
        {
          "type": "split_and_count",
          "config": {
            "split_by": "hayy"
          }
        }
      ],
      "order": 0,
      "cursor_strategy": "copy",
      "source_field": "message",
      "target_field": "postgres_error",
      "extractor_config": {},
      "condition_type": "string",
      "condition_value": "> ERROR: "
    }
  ],
  "version": "4.2.6"
}