Graylog: Creating your first input in Graylog

This documentation is part of the Getting started guide. You can view the complete guide here: How to get started with Graylog.

👋 Welcome to the Stackhero documentation!

Stackhero offers a ready-to-use Graylog cloud solution that provides a host of benefits, including:

  • Unlimited and dedicated SMTP email server included.
  • Effortless updates with just a click.
  • Customisable domain name secured with HTTPS (for example, https://logs.your-company.com).
  • Optimal performance and robust security powered by a private and dedicated VM.

Save time and simplify your life: it only takes 5 minutes to try Stackhero's Graylog cloud hosting solution!

An input is the entry point where Graylog receives your logs. You can send logs via TCP or UDP. Additionally, Graylog can collect log entries from an API, a Kafka queue, a RabbitMQ server, and other sources.

In this example, we will create a raw UDP input. To begin, open the Graylog interface and go to "System" then "Inputs". Select "Raw/Plaintext UDP" and click on "Launch new input". Configure your input with the following values and submit the form:

  1. Node: Select your node
  2. Title: RAW UDP
  3. Port: 5555

Next, open a terminal on your computer and send a UDP message to your Graylog server. Remember to replace XXXXXX with your service domain name:

  • On macOS: echo "Hello Graylog from UDP" | nc -u -w1 -c <XXXXXX>.stackhero-network.com 5555
  • On Linux: echo "Hello Graylog from UDP" | nc -u -w1 <XXXXXX>.stackhero-network.com 5555

After sending the message, return to Graylog and click on "Search". You should see your message 🎉

Congratulations, you have just sent your first message to Graylog! Feel free to create additional inputs and dashboards tailored to your requirements. For further information, the official Graylog documentation may be helpful.