Page 1 of 1

Pivot Charts

Posted: Sat May 16, 2015 10:04 am
by 2Dman
Hi,

In short, i have 2 questions for nagios log server, which i'm testing out:

1. Is there an option to use pivotcharts / pivottables in nagios log server?

For example, I have a Fortigate which send syslogd logs to nagios log server and i filter them.
The following fields come available which i want to use in a chart:

Users
Destip

instead of using the x-axis as a timeline.


2. Also, it is possible to add a field, so ip's would be transformed into a DNS name ?

Re: Pivot Charts

Posted: Mon May 18, 2015 10:12 am
by jolson
Is there an option to use pivotcharts / pivottables in nagios log server?
Would a bar chart work for your purposes? Example below:
2015-05-18 10_06_59-Dashboard • Nagios Log Server.png
You can define a bar chart under the 'Hits' or 'Terms' panel selections. You can also define a bar chart right from the field selection:
2015-05-18 10_10_35-Dashboard • Nagios Log Server.png
Also, it is possible to add a field, so ip's would be transformed into a DNS name ?
This is possible, you will be interested in the DNS filter: http://logstash.net/docs/1.4.2/filters/dns

When you enable the above filter and logs come in, Nagios Log Server will attempt to resolve the IPs to names via reverse DNS lookup. NLS can then re-write specified fields with FQDN instead of an IP.

You will likely want to define a filter similar to the following:

Code: Select all

dns {
reverse => [ "host" ]
action => [ "replace" ]
add_tag => [ "dns" ]
}
I recommend trying it at the top of your filter list - as long as NLS can resolve properly, this should work:
Image