


How to use Graylog for log analysis in Linux environment?
Jul 31, 2023 pm 05:21 PMHow to use Graylog for log analysis in a Linux environment?
Overview:
Graylog is a powerful open source log management and analysis tool that can help us collect, store and analyze log data in a Linux environment. In this article, we will provide a simple guide to help you use Graylog for log analysis in a Linux environment.
Step 1: Install Graylog
First, we need to install Graylog on the Linux server. Here are the steps to install Graylog on CentOS systems:
-
Install the necessary dependencies using the following commands:
sudo yum install epel-release sudo yum install java-1.8.0-openjdk.x86_64
Copy after login Download and install MongoDB:
sudo yum install mongodb sudo systemctl enable mongod sudo systemctl start mongod
Copy after loginDownload and install Elasticsearch:
sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch sudo vi /etc/yum.repos.d/elasticsearch.repo
Copy after loginAdd the following content to the file:
[elasticsearch-6.x] name=Elasticsearch repository for 6.x packages baseurl=https://artifacts.elastic.co/packages/6.x/yum gpgcheck=1 gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch enabled=1 autorefresh=1 type=rpm-md
Copy after loginSave and exit the file, then run the following command:
sudo yum install elasticsearch sudo systemctl enable elasticsearch sudo systemctl start elasticsearch
Copy after loginDownload and install Graylog:
wget https://packages.graylog2.org/repo/packages/graylog-3.2-repository_latest.rpm sudo rpm -i graylog-3.2-repository_latest.rpm sudo yum install graylog-server sudo systemctl enable graylog-server sudo systemctl start graylog-server
Copy after login
Step 2: Configure Graylog
Open Graylog Configuration file
/etc/graylog/server/server.conf
:sudo vi /etc/graylog/server/server.conf
Copy after loginConfigure the following parameters (modify according to your needs):
rest_listen_uri = http://<your_server_ip>:9000/api/ web_listen_uri = http://<your_server_ip>:9000/ elasticsearch_hosts = http://<your_server_ip>:9200
Copy after login
Step 3: Start Graylog
- After completing the configuration, save and exit the file.
Restart the Graylog service:
sudo systemctl restart graylog-server
Copy after login
Step 4: Use Graylog for log analysis
- Open a web browser and visit
http://<your_server_ip>:9000
, log in to the Graylog console with the username and password you configured previously. - Create a new input for receiving log data. Select the type of log source you wish to use and follow the instructions to configure it.
- Configure your log sender (e.g., a file or other application) to send log data to the Graylog server's input port.
- Once Graylog starts receiving and processing log data, you can use Graylog's query and search capabilities to analyze the log data. You can filter and search log information based on time range, keywords, sources, fields and other conditions.
Code sample:
The following is a sample code for sending logs to Graylog using Python to demonstrate how to send the log data of an application to a Graylog server:
import logging import graypy logger = logging.getLogger('my_logger') logger.setLevel(logging.DEBUG) handler = graypy.GELFUDPHandler('localhost', 12201) logger.addHandler(handler) logger.debug('This is a debug message') logger.info('This is an info message') logger.warning('This is a warning message') logger.error('This is an error message')
By using With the above code example, you can send the application's logs to the Graylog server and analyze and search them through Graylog's console.
Summary:
Through this guide, we learned how to install and configure Graylog in a Linux environment, and use Python sample code to send log data to the Graylog server. I hope this article has provided some help and guidance for you to use Graylog for log analysis in a Linux environment. With Graylog, you can more easily collect, store, and analyze large amounts of log data to better understand and monitor your applications and systems.
The above is the detailed content of How to use Graylog for log analysis in Linux environment?. For more information, please follow other related articles on the PHP Chinese website!

Hot Article

Hot tools Tags

Hot Article

Hot Article Tags

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

deepseek web version entrance deepseek official website entrance

Android TV Box gets unofficial Ubuntu 24.04 upgrade

BitPie Bitpie wallet app download address

BITGet official website installation (2025 beginner's guide)

Zabbix 3.4 Source code compilation installation

Detailed explanation: Shell script variable judgment parameter command

Ouyi okx installation package is directly included
