I still have to decide how to react when Graylog2 is not running.
Right now log2gelf will start sending UDP messages (i.e. consume log data) and then receive the ICMP feedback as 'connection refused'.
The alternative is to ignore all network feedback and keep sending. In this case the log2gelf itself would be more reliable (always on, always updating its status file) but if Graylog2 is down then all those messages will be lost.
I still have to decide how to react when Graylog2 is not running. Right now log2gelf will start sending UDP messages (i.e. consume log data) and then receive the ICMP feedback as 'connection refused'.
The alternative is to ignore all network feedback and keep sending. In this case the log2gelf itself would be more reliable (always on, always updating its status file) but if Graylog2 is down then all those messages will be lost.