Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Daniel Aharon
committed
Feb 7, 2012
1 parent
8f57656
commit ac2da27
Showing
5 changed files
with
107 additions
and
59 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,88 @@ | ||
| # On which port (UDP) should we listen for Syslog messages? (Standard: 514) | ||
| syslog_listen_port = 514 | ||
| syslog_protocol = udp | ||
|
|
||
| # ElasticSearch URL (default: http://localhost:9200/) | ||
| elasticsearch_url = http://localhost:9200/ | ||
| elasticsearch_index_name = graylog2 | ||
|
|
||
| # Always try a reverse DNS lookup instead of parsing hostname from syslog message? | ||
| # force_syslog_rdns = false | ||
| # Set time to NOW if parsing date/time from syslog message failed instead of rejecting it? | ||
| allow_override_syslog_date = true | ||
|
|
||
| # MongoDB Configuration | ||
| mongodb_useauth = false | ||
| #mongodb_user = grayloguser | ||
| #mongodb_password = 123 | ||
| mongodb_host = localhost | ||
| #mongodb_replica_set = localhost:27017,localhost:27018,localhost:27019 | ||
| mongodb_database = graylog2 | ||
| mongodb_port = 27017 | ||
|
|
||
| # Raise this according to the maximum connections your MongoDB server can handle if | ||
| # you encounter MongoDB connection problems or queuing up messages. | ||
| mongodb_max_connections = 150 | ||
|
|
||
| # Number of threads allowed to be blocked by MongoDB connections multiplier. | ||
| # Default: 5 | ||
| # If mongodb_max_connections is 150, and mongodb_threads_allowed_to_block_multiplier | ||
| # is 5, then 750 threads can block. More than that and an exception will be thrown. | ||
| # http://api.mongodb.org/java/current/com/mongodb/MongoOptions.html#threadsAllowedToBlockForConnectionMultiplier | ||
| mongodb_threads_allowed_to_block_multiplier = 5 | ||
|
|
||
| # Graylog2 uses an internal message queue that holds all received messages until they# are indexed. The mq_batch_size parameter defines how many messages are sent | ||
| # to ElasticSearch at once (using a _bulk update: | ||
| # http://www.elasticsearch.org/guide/reference/api/bulk.html) | ||
| # The mq_poll_freq parameter controls in which interval (in seconds) the message | ||
| # batch is sent. Example: If you leave the standard values | ||
| # (mq_batch_size = 4000, mq_poll_freq = 1), Graylog2 will index 4000 messages every | ||
| # second. If you have spikes with more than 4000 messages per second, the queue will | ||
| # start growing until you get under 4000 messages/second again. The queue is FIFO and | ||
| # can grow until you run out of RAM. Note that the queue *only* resists in RAM, so if | ||
| # you set the mq_poll_freq to a high value, you may lose a lot of not yet indexed | ||
| # messages when the server crashes. Run the server in debug mode | ||
| # (java -jar graylog2-server.jar --debug) with a |grep '^INFO' to see debug | ||
| # information about the queue and it's size. | ||
| # (INFO : org.graylog2.periodical.BulkIndexerThread - About to index max 4000 | ||
| # messages. You have a total of 103 messages in the queue. [freq:1s]) | ||
| # You can also monitor the queue size in your graylog2-web-interface. | ||
| mq_batch_size = 4000 | ||
| mq_poll_freq = 1 | ||
|
|
||
| # You can set a maximum size of the message queue. If this size is reached, all new | ||
| # messages will be rejected until messages are removed/indexed from the queue. | ||
| # 0 = unlimited queue size (default) | ||
| mq_max_size = 0 | ||
|
|
||
| # Enable realtime collection? This will additionally store information about received | ||
| # messages in a MongoDB collection capped to 50MB size and allows to use realtime | ||
| # features. It usually is a good idea to keep this enabled because it should not | ||
| # cause much IO load. | ||
| enable_realtime_collection = true | ||
|
|
||
| # The (pre-allocated) size of the messages collection in bytes. All your syslog | ||
| # and GELF messages are stored here. Standard: 50000000 [~50MB] | ||
| messages_collection_size = 50000000 | ||
|
|
||
| # Graylog Extended Log Format (GELF) | ||
| use_gelf = true | ||
| gelf_listen_address = 0.0.0.0 | ||
| gelf_listen_port = 12201 | ||
|
|
||
| # Drools Rule File (Use to rewrite incoming log messages) | ||
| # rules_file = /etc/graylog2.d/rules/graylog2.drl | ||
|
|
||
| # AMQP | ||
| amqp_enabled = false | ||
| #amqp_subscribed_queues = somequeue1:gelf,somequeue2:gelf,somequeue3:syslog | ||
| #amqp_host = localhost | ||
| #amqp_port = 5672 | ||
| #amqp_username = guest | ||
| #amqp_password = guest | ||
| #amqp_virtualhost = / | ||
|
|
||
| # Forwarders | ||
| # Timeout in seconds for each connection and read of Logg.ly API when forwarding | ||
| # messages. Default: 3 | ||
| #forwarder_loggly_timeout = 3 |
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters