airbus-cyber / graylog-plugin-logging-alert

Alert notification plugin for Graylog to generate log messages from alerts
Other
23 stars 3 forks source link

Graylog 5.1.2 don't find "Logging Alert Notification " Type #48

Closed yuanfan2012 closed 1 year ago

yuanfan2012 commented 1 year ago

Environment 1、Graylog 5.1.2 2、upload graylog-plugin-logging-alert-5.1.0.jar to /usr/share/graylog-server/plugin/ 3、systemctl restart graylog-server

Alert——New Notification——Notification Type but I don't find "Logging Alert Notification " Type 1 2

c8y3 commented 1 year ago

It should :) Sometimes it is only a matter of refreshing the web interface which is cached in the browser. Could you check the following things:

As a last resort, you can try the docker-compose that we use for tests. It is present in the source repository. Clone the repository, go into directory runtime, create a directory graylog/plugin, copy the plugin jar in this directory, then do a docker-compose up. Once graylog has started, you should be able to log into http://127.0.0.1:9000/alerts/notifications/new and find the logging notification type. If this works, from there, you can try to figure out the difference between this and your setup.

Hope this helps. Let us know. Cheers.

yuanfan2012 commented 1 year ago

Thanks I have checked graylog logs, find a line "2023-08-29T15:26:07.201+08:00 ERROR [CmdLineTool] Plugin "Logging Alert Notification" requires version 5.1.3 - not loading!"

so I upgrade graylog-server to 5.1.4 version the problem solved the steps : 1、rpm -Uvh https://packages.graylog2.org/repo/packages/graylog-5.1-repository_latest.rpm 2、yum upgrade graylog-server 3、graylog logs: 2023-08-29T15:33:31.155+08:00 INFO [CmdLineTool] Loaded plugin: Logging Alert Notification 5.1.0 [com.airbus-cyber-security.graylog.LoggingAlertPlugin]