Graylog - Kibana

Hi All,

I have been working on vendor project helping analyze log data. We have currently setup graylog server for our log management but feel restricted with visualizing some of these data. We were wondering if we could use Kibana with Graylog as it has better visualizing capabilities?

Do we have to configure Logstash for Kibana or can we just install Kibana and configure it with Graylog. Can someone help us with a direction to this process?

I read from forums we can use Shield or ACL like Nginx but how to we get them configured?

Hi,

Currently, Kibana is configured to work with only ES. So, you will have to ingest the data into Kibana by using either ingest node or logstash->es->Kibana and then visualize data.
Couple of blogposts on ingest node: https://www.elastic.co/blog/new-way-to-ingest-part-1, https://www.elastic.co/blog/new-way-to-ingest-part-2

Link to logstash documentation: https://www.elastic.co/guide/en/logstash/current/index.html

Thanks,
Bhavya

Since graylog stores its data in Elasticsearch, you should be able to use Kibana to visualize it. I'm not sure how the data in graylog is mapped, but you will find out soon enough, I imagine.

1 Like

Hi Bhavya,

Thanks for your response. This makes sense, However while using ingest node will elastic search have the housekeeping capabilities? Will there be any restrictions to visualizing in Kibana from Graylog messages?

I suppose logstash is the traditional way to do it, but was just curious about how elasticsearch works with Kibana

Not really sure what you mean here. Kibana in ELK suite is the window into the stack. So, you should be able to visualize your data which is either ingested into ES with an ingest node or through logstash or directly. Should be easy(?) from what Aaron pointed out about graylog storing it's data into ES.

Thanks,
Bhavya

Forget everything about the ingest node, as that was a red herring. Graylog uses its own method to insert log data into Elasticsearch. You should be able to see Graylog's messages in Kibana, as they're stored in Elasticsearch.

1 Like

Ok cool, I will go ahead and install Kibana and see how to point elasticsearch to it. Thanks

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.