Graylog: How to create an input on Graylog

This documentation is part of the Configure inputs guide. View the full guide here: How to configure Graylog inputs.

👋 Welcome to Stackhero documentation

Stackhero provides a fully managed Graylog cloud solution designed for speed and simplicity. You can:

• Rely on an unlimited, dedicated SMTP email server included with your service.
• Apply updates effortlessly with a single click, with no manual intervention needed.
• Use a custom domain name secured by HTTPS (for example, https://logs.your-company.com), giving your team secure, direct access.
• Experience strong performance and security on a private, dedicated infrastructure with no shared resources or noisy neighbors.

Focus on your data, not your tooling: you can get started with Stackhero's Graylog cloud hosting solution in just a few minutes.

To set up your Graylog input, you first need to create it on the Graylog web UI. Afterward, declare the input on the Stackhero dashboard and open the necessary firewall port(s) to allow traffic to reach your instance.

1. Declare the input on Graylog web UI

1. Connect to your Graylog web UI and navigate to System, then Inputs.

2. In the Select input dropdown, choose an input based on the type of data you will receive and click Launch new input.

   Selecting an input on Graylog web UI

3. In the modal that opens, check Global and assign a title (for example, "GELF UDP" if you do not have a more specific title). Avoid altering any other settings unless you are certain about the changes.

If you plan to use TLS encryption (SSL/HTTPS), DO NOT select TLS in the Graylog web UI. TLS encryption is managed directly by your reverse proxy through the Stackhero dashboard.

Example of a GELF UDP input in Graylog

1. Note the port of your input as you will need to specify it on the Stackhero dashboard later. Then, click Save.

2. Declare the input on Stackhero

After creating the input on the Graylog web UI, you need to declare it on the Stackhero dashboard.

1. Go to your Stackhero dashboard and select your Graylog instance.
2. Click on the Configure button.
3. In the Input ports list, check if the port of your new input is declared. If not, add it.
4. Verify the protocol type (UDP or TCP). If you use TCP, you can enable TLS encryption (SSL/HTTPS) by checking the corresponding option (remember that you should not enable TLS on the Graylog web UI!).
5. Once you have completed these steps, validate your new configuration.

Example of a GELF UDP input configuration on Stackhero

3. Allow traffic on the firewall

Finally, after declaring your input on the Stackhero dashboard, you need to allow the traffic through your firewall.

1. Go to the Stackhero dashboard, select your Graylog service, and click on Firewall.
2. Ensure there is a rule accepting traffic from your IP (or use 0.0.0.0/0 to allow any IP).
3. If such a rule does not exist, create one by clicking the Add a rule button.
4. Select the IP you want to allow (set it to 0.0.0.0/0 for any IP), and specify the ports that will receive data from this IP.
5. Choose the Accept action.

Save the rule and validate the configuration by clicking the Validate button.

Example of a firewall configuration

Your input is now fully configured and ready for use!