Відео

☢️

blinding like glimpses:-)

Thanks for this great video. Does it work with opnSense instead of pfSense?

hi i have problem date time in graylog server. we can configure to change the GRAYLOG_TIMEZONE= asia/tashkent in graylog.env but it is not change pls help me

Thank you! Working like a charm as of Feb 2022 (just make sure you get proper InfluxDB image).

hi lephisto. It does not work with the new pfsense 2.5 CE or pfsense plus 21.05. Any suggestion what is wrong?

That fucking music

Please can you help me I get this error in step 5/6 `Step 5/6 : RUN chmod +x /etc/graylog/server/getGeo.sh && /etc/graylog/server/getGeo.sh ---> Running in b30dbe5bac10 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 20 100 20 0 0 112 0 --:--:-- --:--:-- --:--:-- 112 gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error is not recoverable: exiting now ERROR: Service 'graylog' failed to build: The command '/bin/sh -c chmod +x /etc/graylog/server/getGeo.sh && /etc/graylog/server/getGeo.sh' returned a non-zero code: 2` Thanks.

Hello, is anyone experiencing the same issue when running the 5/6 step? `Step 5/6 : RUN chmod +x /etc/graylog/server/getGeo.sh && /etc/graylog/server/getGeo.sh ---> Running in b30dbe5bac10 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 20 100 20 0 0 112 0 --:--:-- --:--:-- --:--:-- 112 gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error is not recoverable: exiting now ERROR: Service 'graylog' failed to build: The command '/bin/sh -c chmod +x /etc/graylog/server/getGeo.sh && /etc/graylog/server/getGeo.sh' returned a non-zero code: 2` Thanks.

Hey, so I'm not sure if I'm doing it wrong or what but for some reason when trying to use the docker logs I get a validation exception for the length of the password. I originally was using a password that was under the 16 character length but then changed it back to the default password and still gives me the same error. The default password is more than 16 characters so I have no idea why it is still giving me this error. Any troubleshooting tips? error: i.imgur.com/H0GgqEA.png

Hello I have the following error when launching the compouse Step 5/6 : RUN chmod +x /etc/graylog/server/getGeo.sh && /etc/graylog/server/getGeo.sh ---> Running in 2ba96f4a5392 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 20 100 20 0 0 49 0 --:--:-- --:--:-- --:--:-- 49 gzip: stdin: not in gzip format tar: Child returned status 1 tar: Error is not recoverable: exiting now ERROR: Service 'graylog' failed to build: The command '/bin/sh -c chmod +x /etc/graylog/server/getGeo.sh && /etc/graylog/server/getGeo.sh' returned a non-zero code: 2 Help!!

thanks man for setting this up and for sharing. I've set this up and all is running however Grafana is not showing any data. Graylog seems fine, I can see the data arriving. I'm using pfSense 2.5 this might be the reason? Any idea? thanks.

graylog interface won't start, try it on ubuntu 18.04. does anyone else have the same problem found a solution to it?

In regards to Opnsense, is there an issue with parsing the logs ? Answer: No, you just have change source to hostname in the graylog ruleset. Thanks lephisto! Great Tutorial

Great video. Nice editing, appropriate background music, to the point. Thank you!

No connection to geolite.maxmind.com/ This causes the error: curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number github.com/lephisto/pfsense-analytics/issues/45 I would be glad for help or ideas on how to get around this problem.

Thank u very much for this guide. How could i do to monitor several pfsense firewalls??

Thank you very much, very usefull !

Great video, info is fantastic... music is distracting... nice, but distracting.... thanks for the content.

What's with the loud and obnoxious music?

Thanks for making this video. Very helpful. Just some feedback - the music in the background is distracting and I'd prefer an audio track without the music. Maybe that is just my preference. Thanks!

Thank you Thank you Thank you! I followed your guide and it is working great. Hope you are able to update the repo with the new getGeo.sh parameters ( the private key ) Appreciate you putting together this video as well as the text guide.

Great stuff. Keep being awesome.

Hi When I type and enter vim docker-compose.yml , is empty ?

First I cannot connect to graylog : So I replace the name for the IP : fixed for graylog Web Page Now I still have some problem : cerebro cannot connect elasticsearch I also receive this error : c 2020-05-24 @,982 INFO : org.graylog2.periodical.IndexerClusterCheckerThread - Indexer not fully initialized yet. Skipping periodic cluster check. 2020-05-24 @,985 ERROR: org.graylog2.indexer.cluster.Cluster - Couldn't read cluster health for indices [graylog_*] (Could not connect to elasticsearch:9200)

Hey lephisto, hab das alles soweit funktionsfähig. Leider funzt die Map nicht so. In deinem Reddit Thread ist im Bild auch Ingress+Egress auf der Map, zeigt bei mir aber nichts an. Ich habe nichts außer pfSense und InfluxDB laufen. Brauche ich da noch was? Vielen Dank!

Are there any extra steps to be able to switch the Timeseries Driver to Influx DB? I've tried and it will bring up an error code saying that it can't find a version of InfluxDB. Did you have to install InfluxDB seperately?

Maxmind changed the way they provide the geo database, so the script gets an error trying to run getGeo.sh which is in /Docker/graylog folder You must create an account on their website and you will get a license key (it is free). Then edit the line in teh getGeo.sh file : download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=YOUR_LICENSE_KEY&suffix=tar.gz Make sure you replace YOUR_LICENSE_KEY with the license from maxmind.

May be missing something, but doesn't appear to work. Data is not getting sent over to Grafana. Not sure if it's a timestamp problem since graylog doesn't show any results unless I change query to 8 hours..

Very well explained and has saved me a lot of time with them set up as Docker Containers - Good learning experience for me too, I'm not the best when it comes to Linux =] One thing I have noticed which might need updating when you get a chance, maxmind has changed their GeoLite2 maps to no longer be publicly available anymore without a login and license key, It is still free but you need to sign up and grab the link with a license key. I ended up copying the file "GeoLite2-City.mmdb" across to the /pfsense-analytics/Docker/graylog folder using FileZilla as I was unable to figure out the "getGeo.sh" script to make it download using the url (again I'm really simple when it comes to linux) so there might be an easy way to fix this. Once I edited the script to copy the GeoLite2-City.mmdb file to the temp files for the container, the script continued on and created all the required services and setup was good. Thanks again, Excellent work!

Thank you so much! - I followed around 10 guides trying to get his to work, yours was by far the best and all working !

Thanks, very good guide

Thanks for doing this guide

Cool ... Thank you for coming forward with this guide.

Awesome stuff. I hope you make more these vids ... top !!!