search

socallinuxexpo / scale-network

SCaLE's on-site expo network configurations, wifi, tooling, and scripts
https://www.socallinuxexpo.org/
BSD 3-Clause "New" or "Revised" License
40 stars 16 forks source link

Graylog for rsyslog + NetFlow/sFlow Data Collection #757

Open MrHamel opened 3 months ago

MrHamel commented 3 months ago

Description

Would it be wise to use something like Graylog, that can ingest syslog data, NetFlow/sFlow data, among other things, make it searchable, and have a dashboard to present data from?

What is Graylog?

Grafana also supports ElasticSearch as a data source if we want to stick to a single dashboard system and solely use Graylog as ingestion, or have two dashboards.

Acceptance Criteria

Discussion on using Graylog.

davidelang commented 3 months ago

rsyslog can also send data to elasticsearch.

adding a netflow connector is an interesting idea, but I'd much rather have simple syslog to files working again than have a partially implemented fancier system that's not quite there.

David Lang

owendelong commented 3 months ago

I’m hesitant to adopt anything that has a dependency on Mongo. On Mar 29, 2024, at 09:59, David Lang @.***> wrote: rsyslog can also send data to elasticsearch.

adding a netflow connector is an interesting idea, but I'd much rather have simple syslog to files working again than have a partially implemented fancier system that's not quite there.

David Lang

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>