HttpOutput Plugin for Graylog

Required Graylog version: 2.0 and later

This Plugin has a very specific purpose: Write the messages to an Http, indicated in the Plugin configuration parameters.

Getting started

This project is using Maven 3 and requires Java 8 or higher.

Installation

Download the plugin

• Clone this repository.
• Run mvn package to build a JAR file.
• Optional: Run mvn jdeb:jdeb and mvn rpm:rpm to create a DEB and RPM package respectively.
• Copy generated JAR file in target directory to your Graylog plugin directory.
• Restart the Graylog.

The plugin directory is the plugins/ folder relative from your graylog-server directory by default and can be configured in your graylog.conf file.

Restart graylog-server and you are done.

Usage

Once you have installed the plugin, you can configure an Output of type com.plugin.HttpOutput, with this simple parameter:

output_api: API where the stream message is forwarded to : "https://intake.sekoia.io/batch".

Troubleshoot

If your process/output buffers are filling up, meaning your output rate does not follow your input rate, try to increase the following values in your graylog.conf file:

# The number of parallel running processors.
# Raise this number if your buffers are filling up.
processbuffer_processors = 5
outputbuffer_processors = 3

Plugin Release

We are using the maven release plugin:

$ mvn release:prepare
[...]
$ mvn release:perform