Home Operation and Maintenance Linux Operation and Maintenance How to use Graylog for log analysis in Linux environment?

How to use Graylog for log analysis in Linux environment?

Jul 31, 2023 pm 05:21 PM
linux Log analysis graylog

How to use Graylog for log analysis in a Linux environment?

Overview:
Graylog is a powerful open source log management and analysis tool that can help us collect, store and analyze log data in a Linux environment. In this article, we will provide a simple guide to help you use Graylog for log analysis in a Linux environment.

Step 1: Install Graylog
First, we need to install Graylog on the Linux server. Here are the steps to install Graylog on CentOS systems:

  1. Install the necessary dependencies using the following commands:

    sudo yum install epel-release
    sudo yum install java-1.8.0-openjdk.x86_64
    Copy after login
  2. Download and install MongoDB:

    sudo yum install mongodb
    sudo systemctl enable mongod
    sudo systemctl start mongod
    Copy after login
  3. Download and install Elasticsearch:

    sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch
    sudo vi /etc/yum.repos.d/elasticsearch.repo
    Copy after login

    Add the following content to the file:

    [elasticsearch-6.x]
    name=Elasticsearch repository for 6.x packages
    baseurl=https://artifacts.elastic.co/packages/6.x/yum
    gpgcheck=1
    gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
    enabled=1
    autorefresh=1
    type=rpm-md
    Copy after login

    Save and exit the file, then run the following command:

    sudo yum install elasticsearch
    sudo systemctl enable elasticsearch
    sudo systemctl start elasticsearch
    Copy after login
  4. Download and install Graylog:

    wget https://packages.graylog2.org/repo/packages/graylog-3.2-repository_latest.rpm
    sudo rpm -i graylog-3.2-repository_latest.rpm
    sudo yum install graylog-server
    sudo systemctl enable graylog-server
    sudo systemctl start graylog-server
    Copy after login

Step 2: Configure Graylog

  1. Open Graylog Configuration file /etc/graylog/server/server.conf:

    sudo vi /etc/graylog/server/server.conf
    Copy after login
  2. Configure the following parameters (modify according to your needs):

    rest_listen_uri = http://<your_server_ip>:9000/api/
    web_listen_uri = http://<your_server_ip>:9000/
    elasticsearch_hosts = http://<your_server_ip>:9200
    Copy after login

Step 3: Start Graylog

  1. After completing the configuration, save and exit the file.
  2. Restart the Graylog service:

    sudo systemctl restart graylog-server
    Copy after login

Step 4: Use Graylog for log analysis

  1. Open a web browser and visit http://<your_server_ip>:9000, log in to the Graylog console with the username and password you configured previously.
  2. Create a new input for receiving log data. Select the type of log source you wish to use and follow the instructions to configure it.
  3. Configure your log sender (e.g., a file or other application) to send log data to the Graylog server's input port.
  4. Once Graylog starts receiving and processing log data, you can use Graylog's query and search capabilities to analyze the log data. You can filter and search log information based on time range, keywords, sources, fields and other conditions.

Code sample:
The following is a sample code for sending logs to Graylog using Python to demonstrate how to send the log data of an application to a Graylog server:

import logging
import graypy

logger = logging.getLogger('my_logger')
logger.setLevel(logging.DEBUG)

handler = graypy.GELFUDPHandler('localhost', 12201)
logger.addHandler(handler)

logger.debug('This is a debug message')
logger.info('This is an info message')
logger.warning('This is a warning message')
logger.error('This is an error message')
Copy after login

By using With the above code example, you can send the application's logs to the Graylog server and analyze and search them through Graylog's console.

Summary:
Through this guide, we learned how to install and configure Graylog in a Linux environment, and use Python sample code to send log data to the Graylog server. I hope this article has provided some help and guidance for you to use Graylog for log analysis in a Linux environment. With Graylog, you can more easily collect, store, and analyze large amounts of log data to better understand and monitor your applications and systems.

The above is the detailed content of How to use Graylog for log analysis in Linux environment?. For more information, please follow other related articles on the PHP Chinese website!

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot Article Tags

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

deepseek web version entrance deepseek official website entrance deepseek web version entrance deepseek official website entrance Feb 19, 2025 pm 04:54 PM

deepseek web version entrance deepseek official website entrance

Android TV Box gets unofficial Ubuntu 24.04 upgrade Android TV Box gets unofficial Ubuntu 24.04 upgrade Sep 05, 2024 am 06:33 AM

Android TV Box gets unofficial Ubuntu 24.04 upgrade

How to install deepseek How to install deepseek Feb 19, 2025 pm 05:48 PM

How to install deepseek

BitPie Bitpie wallet app download address BitPie Bitpie wallet app download address Sep 10, 2024 pm 12:10 PM

BitPie Bitpie wallet app download address

BITGet official website installation (2025 beginner's guide) BITGet official website installation (2025 beginner's guide) Feb 21, 2025 pm 08:42 PM

BITGet official website installation (2025 beginner's guide)

Zabbix 3.4 Source code compilation installation Zabbix 3.4 Source code compilation installation Sep 04, 2024 am 07:32 AM

Zabbix 3.4 Source code compilation installation

Detailed explanation: Shell script variable judgment parameter command Detailed explanation: Shell script variable judgment parameter command Sep 02, 2024 pm 03:25 PM

Detailed explanation: Shell script variable judgment parameter command

Ouyi okx installation package is directly included Ouyi okx installation package is directly included Feb 21, 2025 pm 08:00 PM

Ouyi okx installation package is directly included

See all articles