Pivot Charts

[2Dman]

Hi,

In short, i have 2 questions for nagios log server, which i'm testing out:

1. Is there an option to use pivotcharts / pivottables in nagios log server?

For example, I have a Fortigate which send syslogd logs to nagios log server and i filter them.
The following fields come available which i want to use in a chart:

Users
Destip

instead of using the x-axis as a timeline.


2. Also, it is possible to add a field, so ip's would be transformed into a DNS name ?

[jolson]

Is there an option to use pivotcharts / pivottables in nagios log server?

Would a bar chart work for your purposes? Example below:

2015-05-18 10_06_59-Dashboard • Nagios Log Server.png

You can define a bar chart under the 'Hits' or 'Terms' panel selections. You can also define a bar chart right from the field selection:

2015-05-18 10_10_35-Dashboard • Nagios Log Server.png

Also, it is possible to add a field, so ip's would be transformed into a DNS name ?

This is possible, you will be interested in the DNS filter: http://logstash.net/docs/1.4.2/filters/dns

When you enable the above filter and logs come in, Nagios Log Server will attempt to resolve the IPs to names via reverse DNS lookup. NLS can then re-write specified fields with FQDN instead of an IP.

You will likely want to define a filter similar to the following:

Code: Select all

dns {
reverse => [ "host" ]
action => [ "replace" ]
add_tag => [ "dns" ]
}

I recommend trying it at the top of your filter list - as long as NLS can resolve properly, this should work: