Skip to content

Instantly share code, notes, and snippets.

@wheel5up
Created May 11, 2025 21:30
Show Gist options
  • Select an option

  • Save wheel5up/41e0cccadf5d906615b2d37a0430a15e to your computer and use it in GitHub Desktop.

Select an option

Save wheel5up/41e0cccadf5d906615b2d37a0430a15e to your computer and use it in GitHub Desktop.
Zabbix template to monitor Graylog built on Graylog 6.1.4 and Zabbix 7.0.2.
{
"zabbix_export": {
"version": "7.0",
"template_groups": [
{
"uuid": "a571c0d144b14fd4a87a9d9b2aa9fcd6",
"name": "Templates/Applications"
}
],
"templates": [
{
"uuid": "3595e8a569bd40ce8170c43f046705aa",
"template": "Graylog",
"name": "Graylog",
"groups": [
{
"name": "Templates/Applications"
}
],
"items": [
{
"uuid": "52f7d04fba384b448856da2b5843a930",
"name": "Get buffers",
"type": "HTTP_AGENT",
"key": "graylog.buffers",
"value_type": "TEXT",
"authtype": "BASIC",
"username": "{$GRAYLOGUSER}",
"password": "{$GRAYLOGWORD}",
"url": "https://{$CONTAINERIP}/api/cluster/{$GRAYLOGNODEID}/metrics/namespace/org.graylog2.buffers",
"triggers": [
{
"uuid": "9a6d4284a6b94645ba455c15d4fee319",
"expression": "nodata(/Graylog/graylog.buffers,3m)=1",
"name": "Graylog buffer metrtics",
"priority": "WARNING",
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
}
]
}
]
},
{
"uuid": "28a9cf6bab6d45b4885ff8ca0127a501",
"name": "Get journal",
"type": "HTTP_AGENT",
"key": "graylog.journal",
"value_type": "TEXT",
"authtype": "BASIC",
"username": "{$GRAYLOGUSER}",
"password": "{$GRAYLOGPASSWORD}",
"url": "https://{$CONTAINERIP}/api/cluster/{$GRAYLOGNODEID}/metrics/namespace/org.graylog2.journal",
"tags": [
{
"tag": "component",
"value": "journal"
}
]
},
{
"uuid": "6f57a0c2c29d44e396f8c4b5e37dddfd",
"name": "org.graylog2.journal.append.1-sec-rate",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.append.1-sec-rate]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.append.1-sec-rate')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "ecfd2e9593b64227b2a870499afe8ff7",
"name": "org.graylog2.journal.entries-uncommitted",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.entries-uncommitted]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.entries-uncommitted')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "292cb910afc946c9925b9117f4a8c986",
"name": "org.graylog2.journal.oldest-segment",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.oldest-segment]",
"value_type": "TEXT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.oldest-segment')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "1613b84f96394a8c86c03c8f90cbd5e0",
"name": "org.graylog2.journal.read.1-sec-rate",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.read.1-sec-rate]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.read.1-sec-rate')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "73a0b9227d97474586df1369b96b268b",
"name": "org.graylog2.journal.segments",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.segments]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.segments')].metric.value.first()"
]
},
{
"type": "DISCARD_UNCHANGED_HEARTBEAT",
"parameters": [
"3600"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "4cfa88524cc448c9ba9a7416d79ef0b4",
"name": "org.graylog2.journal.size-limit",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.size-limit]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.size-limit')].metric.value.first()"
]
},
{
"type": "DISCARD_UNCHANGED_HEARTBEAT",
"parameters": [
"3600"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "05c1753c747144c0ac63143a26f61011",
"name": "org.graylog2.journal.size",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.size]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.size')].metric.value.first()"
]
},
{
"type": "DISCARD_UNCHANGED_HEARTBEAT",
"parameters": [
"3600"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "559a2b8169794cf19bea6acf10d02aa4",
"name": "org.graylog2.journal.utilization-ratio",
"type": "DEPENDENT",
"key": "graylog.journal[org.graylog2.journal.utilization-ratio]",
"value_type": "FLOAT",
"units": "%",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == 'org.graylog2.journal.utilization-ratio')].metric.value.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"100"
]
}
],
"master_item": {
"key": "graylog.journal"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "journal"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "4254ebf24a234aa18ab4de6a3c92fc6b",
"name": "Get jvm",
"type": "HTTP_AGENT",
"key": "graylog.jvm",
"value_type": "TEXT",
"authtype": "BASIC",
"username": "{$GRAYLOGUSER}",
"password": "{$GRAYLOGPASSWORD}",
"url": "https://{$CONTAINERIP}/api/cluster/{$GRAYLOGNODEID}/metrics/namespace/jvm.memory",
"tags": [
{
"tag": "component",
"value": "jvm"
}
],
"triggers": [
{
"uuid": "698baa712d914af0be1b446dedb9deab",
"expression": "nodata(/Graylog/graylog.jvm,3m)=1",
"name": "Graylog jvm metrtics",
"priority": "WARNING",
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
}
]
}
]
},
{
"uuid": "f60bdfd3f00d467c8d1ac82761164e86",
"name": "Get logs",
"type": "HTTP_AGENT",
"key": "graylog.logs",
"value_type": "TEXT",
"authtype": "BASIC",
"username": "{$GRAYLOGUSER}",
"password": "{$GRAYLOGPASSWORD}",
"url": "https://{$CONTAINERIP}/api/cluster/{$GRAYLOGNODEID}/metrics/namespace/org.apache",
"triggers": [
{
"uuid": "72b3d7e61d1c497fbdc1bc4c0b8acbd0",
"expression": "nodata(/Graylog/graylog.logs,3m)=1",
"name": "Graylog log metrtics",
"priority": "WARNING",
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "logs"
}
]
}
]
},
{
"uuid": "83fb865958084154a1a9e9d921231719",
"name": "Get inputs.syslog",
"type": "HTTP_AGENT",
"key": "graylog.syslog",
"value_type": "TEXT",
"authtype": "BASIC",
"username": "{$GRAYLOGUSER}",
"password": "{$GRAYLOGPASSWORD}",
"url": "https://{$CONTAINERIP}/api/cluster/{$GRAYLOGNODEID}/metrics/namespace/org.graylog2.inputs.syslog",
"tags": [
{
"tag": "component",
"value": "inputs.syslog"
}
]
}
],
"discovery_rules": [
{
"uuid": "6a30c3ee71c54a22a30722c4e826da81",
"name": "buffers IOP",
"type": "DEPENDENT",
"key": "graylog.discovery.iop",
"description": "Input/Output/Process buffers. These are the high level metrics on the node page",
"item_prototypes": [
{
"uuid": "9d10c251785845f297e09e5018474a30",
"name": "{#NAME}.size",
"type": "DEPENDENT",
"key": "graylog.buffer[{#NAME},size]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.size')].metric.value.first()"
]
},
{
"type": "DISCARD_UNCHANGED_HEARTBEAT",
"parameters": [
"3600"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "e8d08167ec5344b681569722f578fc38",
"name": "{#NAME}.usage",
"type": "DEPENDENT",
"key": "graylog.buffer[{#NAME},usage]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.usage')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
],
"trigger_prototypes": [
{
"uuid": "20641bdd2e354b1aaa96578ec779acf2",
"expression": "count(/Graylog/graylog.buffer[{#NAME},usage],3m,\"gt\",{$GRAYLOG.BUFFER.HIGH:\"{#TYPE}\"}) > 2",
"name": "Graylog Buffer {#NAME} high usage",
"priority": "HIGH"
}
]
}
],
"graph_prototypes": [
{
"uuid": "5fd3dafe694f4e90a14b13e29b08f676",
"name": "Buffers {#NAME}",
"graph_items": [
{
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.buffer[{#NAME},usage]"
}
}
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"lld_macro_paths": [
{
"lld_macro": "{#NAME}",
"path": "$.name"
},
{
"lld_macro": "{#TYPE}",
"path": "$.type"
}
],
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics[?(@.type == 'gauge' && @.full_name =~ '.input.|.output.|process.size|process.usage' )]"
]
},
{
"type": "JAVASCRIPT",
"parameters": [
"const grouped = {};\nvar jvmArray = JSON.parse(value);\n var metrics = jvmArray;\n var i;\n\n for (i = 0; i < metrics.length; i++) {\n var entry = metrics[i];\n var fullName = entry.full_name;\n var value = entry.metric.value;\n\n var parts = fullName.split(\".\");\n var metricName = parts[parts.length - 1]; // e.g., \"used\"\n var groupKey = parts.slice(0, parts.length - 1).join(\".\"); // e.g., \"jvm.memory.pools.G1-Old-Gen\"\n\n if (!grouped[groupKey]) {\n grouped[groupKey] = {};\n grouped[groupKey]['type'] = parts[parts.length -2];\n }\n\n grouped[groupKey][metricName] = value;\n }\n var result = [];\n for (var key in grouped) {\n if (grouped.hasOwnProperty(key)) {\n var group = grouped[key];\n\n // Extract type and remove it from the metrics object\n var type = group.type;\n delete group.type;\n\n result.push({\n name: key,\n type: type,\n metrics: group\n });\n }\n}\n return JSON.stringify(result)"
]
}
]
},
{
"uuid": "653892f86b2b4bcaad4a1c0a43f971e1",
"name": "memory",
"type": "DEPENDENT",
"key": "graylog.discovery.jvm.mem",
"item_prototypes": [
{
"uuid": "a6ed003303a5462489dc607d31f2653a",
"name": "{#NAME}.committed",
"type": "DEPENDENT",
"key": "graylog.jvm[{#NAME},committed]",
"units": "b",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.committed')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.jvm"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "ae3737858489465cb2a10d3f64bfd8b6",
"name": "{#NAME}.init",
"type": "DEPENDENT",
"key": "graylog.jvm[{#NAME},init]",
"units": "b",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.init')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.jvm"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "2ab73da1a825412a98d0ab818679c42a",
"name": "{#NAME}.max",
"type": "DEPENDENT",
"key": "graylog.jvm[{#NAME},max]",
"units": "b",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.max')].metric.value.first()"
],
"error_handler": "CUSTOM_VALUE",
"error_handler_params": "0"
}
],
"master_item": {
"key": "graylog.jvm"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "a3cec73ce52c46f4988b4b1f5d5d744c",
"name": "{#NAME}.usage",
"type": "DEPENDENT",
"key": "graylog.jvm[{#NAME},usage]",
"value_type": "FLOAT",
"units": "%",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.usage')].metric.value.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"100"
]
}
],
"master_item": {
"key": "graylog.jvm"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "ced0901aaf26408b8ea7da4a530aadd2",
"name": "{#NAME}.used-after-gc",
"type": "DEPENDENT",
"key": "graylog.jvm[{#NAME},used-after-gc]",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"units": "b",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.used-after-gc')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.jvm"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "6d5030eb5eb740b7889f0ccb0f4edd41",
"name": "{#NAME}.used",
"type": "DEPENDENT",
"key": "graylog.jvm[{#NAME},used]",
"units": "b",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.used')].metric.value.first()"
]
}
],
"master_item": {
"key": "graylog.jvm"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "jvm"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "type",
"value": "gauge"
}
]
}
],
"graph_prototypes": [
{
"uuid": "1b6cb06e88754e45bd39d987234fadf9",
"name": "JVM {#NAME}",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.jvm[{#NAME},committed]"
}
},
{
"sortorder": "1",
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.jvm[{#NAME},init]"
}
},
{
"sortorder": "2",
"color": "F63100",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.jvm[{#NAME},max]"
}
},
{
"sortorder": "3",
"color": "2774A4",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.jvm[{#NAME},used]"
}
},
{
"sortorder": "4",
"drawtype": "BOLD_LINE",
"color": "FF5722",
"yaxisside": "RIGHT",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.jvm[{#NAME},usage]"
}
},
{
"sortorder": "5",
"color": "A54F10",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.jvm[{#NAME},used-after-gc]"
}
}
]
}
],
"master_item": {
"key": "graylog.jvm"
},
"lld_macro_paths": [
{
"lld_macro": "{#NAME}",
"path": "$.name"
}
],
"preprocessing": [
{
"type": "JAVASCRIPT",
"parameters": [
"const grouped = {};\nvar jvmArray = JSON.parse(value);\n var metrics = jvmArray.metrics;\n var i;\n\n for (i = 0; i < metrics.length; i++) {\n var entry = metrics[i];\n var fullName = entry.full_name;\n var value = entry.metric.value;\n\n var parts = fullName.split(\".\");\n var metricName = parts[parts.length - 1]; // e.g., \"used\"\n var groupKey = parts.slice(0, parts.length - 1).join(\".\"); // e.g., \"jvm.memory.pools.G1-Old-Gen\"\n\n if (!grouped[groupKey]) {\n grouped[groupKey] = {};\n }\n\n grouped[groupKey][metricName] = value;\n }\n var result = [];\n for (var key in grouped) {\n if (grouped.hasOwnProperty(key)) {\n result.push({\n name: key,\n metrics: grouped[key]\n });\n }\n }\n\n return JSON.stringify(result)"
]
}
],
"overrides": [
{
"name": "garbage collection items",
"step": "1",
"filter": {
"conditions": [
{
"macro": "{#NAME}",
"value": "G1"
}
]
},
"operations": [
{
"operator": "LIKE",
"value": "used-after-gc",
"discover": "DISCOVER",
"status": "ENABLED"
}
]
}
]
},
{
"uuid": "5e81c3263fbb4cf5b39fc581118dc6d6",
"name": "logs meter",
"type": "DEPENDENT",
"key": "graylog.discovery.logs.meter",
"description": "events per second",
"item_prototypes": [
{
"uuid": "7a67164d3f3740249da825419f96d3ed",
"name": "{#TYPE} rate 1min {{#FULLNAME}.regsub(\"^org\\.apache\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.logs[{#FULLNAME},rate,1min]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.one_minute.first()"
]
}
],
"master_item": {
"key": "graylog.logs"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "log4j"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "278edb26735842799e45a645d2f30402",
"name": "{#TYPE} rate 5min {{#FULLNAME}.regsub(\"^org\\.apache\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.logs[{#FULLNAME},rate,5min]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.five_minute.first()"
]
}
],
"master_item": {
"key": "graylog.logs"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "log4j"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "008b5aabbe674a9d91ccf20996c14c01",
"name": "{#TYPE} rate 15min {{#FULLNAME}.regsub(\"^org\\.apache\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.logs[{#FULLNAME},rate,15min]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.fifteen_minute.first()"
]
}
],
"master_item": {
"key": "graylog.logs"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "log4j"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "0d9f380c584b4c65bdd7a390890b77dc",
"name": "{#TYPE} rate mean {{#FULLNAME}.regsub(\"^org\\.apache\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.logs[{#FULLNAME},rate,mean]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.mean.first()"
]
}
],
"master_item": {
"key": "graylog.logs"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "log4j"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "27d7444276b34d718441ba6f21a8c19f",
"name": "{#TYPE} rate total {{#FULLNAME}.regsub(\"^org\\.apache\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.logs[{#FULLNAME},rate,total]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.total.first()"
]
}
],
"master_item": {
"key": "graylog.logs"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "log4j"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
}
],
"graph_prototypes": [
{
"uuid": "d720cfb1f3c04796ac65336128916922",
"name": "Log4j {#FULLNAME}",
"graph_items": [
{
"color": "FFFF00",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.logs[{#FULLNAME},rate,1min]"
}
},
{
"sortorder": "1",
"color": "00FF00",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.logs[{#FULLNAME},rate,5min]"
}
},
{
"sortorder": "2",
"color": "0080FF",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.logs[{#FULLNAME},rate,15min]"
}
},
{
"sortorder": "3",
"color": "FF4000",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.logs[{#FULLNAME},rate,mean]"
}
},
{
"sortorder": "4",
"drawtype": "BOLD_LINE",
"color": "BF00FF",
"yaxisside": "RIGHT",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.logs[{#FULLNAME},rate,total]"
}
}
]
}
],
"master_item": {
"key": "graylog.logs"
},
"lld_macro_paths": [
{
"lld_macro": "{#FULLNAME}",
"path": "$.full_name"
},
{
"lld_macro": "{#NAME}",
"path": "$.name"
},
{
"lld_macro": "{#TYPE}",
"path": "$.type"
}
],
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics[?(@.type == 'meter')]"
]
}
]
},
{
"uuid": "fd9c92fc53b544158b7e85f8e9d4bbf4",
"name": "meter-timer",
"type": "DEPENDENT",
"key": "graylog.discovery.meter",
"description": "events per second",
"item_prototypes": [
{
"uuid": "dd526a0fc0264a298a9893888b3b8cdb",
"name": "{#TYPE} rate 1min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.metrics[{#FULLNAME},rate,1min]",
"value_type": "FLOAT",
"description": "events per second",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.one_minute.first()"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "c6fa8b77f3224a6e80deaabab27779ea",
"name": "{#TYPE} rate 5min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.metrics[{#FULLNAME},rate,5min]",
"value_type": "FLOAT",
"description": "events per second",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.five_minute.first()"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "bd38acf52d774f4c8b2f7ede7b6ba0a8",
"name": "{#TYPE} rate 15min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.metrics[{#FULLNAME},rate,15min]",
"value_type": "FLOAT",
"description": "events per second",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.fifteen_minute.first()"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "08749812d3ed42bfa1634e1579ddfd4e",
"name": "{#TYPE} rate mean {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.metrics[{#FULLNAME},rate,mean]",
"value_type": "FLOAT",
"description": "events per second",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.mean.first()"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "4dc395808a7244e1a8d1f4b74b02305d",
"name": "{#TYPE} rate total {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.metrics[{#FULLNAME},rate,total]",
"value_type": "FLOAT",
"description": "total events",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.total.first()"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "2f02b4070552474aac373f98f8060ebc",
"name": "{#TYPE} time max {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.timer[{#FULLNAME},max]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"units": "s",
"description": "micro seconds",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.max.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "5b6362abec034fd4ace97c5873ef0f3a",
"name": "{#TYPE} time mean {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.timer[{#FULLNAME},mean]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"units": "s",
"description": "micro seconds",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.mean.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "d8bb9bc232fe4fe8a00e81330fb6e174",
"name": "{#TYPE} time min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.timer[{#FULLNAME},min]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"units": "s",
"description": "micro seconds",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.min.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "ef03e3a769d140d1896ccd3a123c9d88",
"name": "{#TYPE} time std_dev {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")}",
"type": "DEPENDENT",
"key": "graylog.timer[{#FULLNAME},std_dev]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"units": "s",
"description": "micro seconds",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.std_dev.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
}
],
"graph_prototypes": [
{
"uuid": "63275a4de71c4891aad02b0040271916",
"name": "{#TYPE} rate {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")} Events per Second",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.metrics[{#FULLNAME},rate,1min]"
}
},
{
"sortorder": "1",
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.metrics[{#FULLNAME},rate,5min]"
}
},
{
"sortorder": "2",
"color": "F63100",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.metrics[{#FULLNAME},rate,15min]"
}
},
{
"sortorder": "3",
"color": "2774A4",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.metrics[{#FULLNAME},rate,mean]"
}
}
]
},
{
"uuid": "2d975699b5d24b8b98983cc3c87e94e1",
"name": "{#TYPE} time {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")} microrseconds",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.timer[{#FULLNAME},max]"
}
},
{
"sortorder": "1",
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.timer[{#FULLNAME},mean]"
}
},
{
"sortorder": "2",
"color": "F63100",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.timer[{#FULLNAME},min]"
}
},
{
"sortorder": "3",
"color": "2774A4",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.timer[{#FULLNAME},std_dev]"
}
}
],
"discover": "NO_DISCOVER"
}
],
"master_item": {
"key": "graylog.buffers"
},
"lld_macro_paths": [
{
"lld_macro": "{#FULLNAME}",
"path": "$.full_name"
},
{
"lld_macro": "{#NAME}",
"path": "$.name"
},
{
"lld_macro": "{#TYPE}",
"path": "$.type"
}
],
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics[?(@.type == 'meter' || @.type == 'timer')]"
]
}
],
"overrides": [
{
"name": "timer only item prototypes",
"step": "1",
"filter": {
"conditions": [
{
"macro": "{#TYPE}",
"value": "timer"
}
]
},
"operations": [
{
"operator": "LIKE",
"value": "timer",
"discover": "DISCOVER",
"status": "ENABLED"
}
]
},
{
"name": "create timer graphs",
"step": "2",
"filter": {
"conditions": [
{
"macro": "{#TYPE}",
"value": "timer"
}
]
},
"operations": [
{
"operationobject": "GRAPH_PROTOTYPE",
"operator": "LIKE",
"value": "time",
"discover": "DISCOVER"
}
]
}
]
},
{
"uuid": "abb5df72e42c4c6abc9770c92114231e",
"name": "processor tasks",
"type": "DEPENDENT",
"key": "graylog.discovery.processors",
"description": "processors",
"item_prototypes": [
{
"uuid": "b71dc21d2fc6413aafef9ea26ef1c16a",
"name": "{#NAME} active",
"type": "DEPENDENT",
"key": "graylog.tasks[{#NAME},active]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.active')].metric.value.first()"
]
},
{
"type": "SIMPLE_CHANGE"
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "tasks"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "604d5d9bae62452ca01f2ee33214b564",
"name": "{#NAME} completed",
"type": "DEPENDENT",
"key": "graylog.tasks[{#NAME},completed]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.completed')].metric.value.first()"
]
},
{
"type": "SIMPLE_CHANGE"
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "tasks"
},
{
"tag": "type",
"value": "gauge"
}
]
},
{
"uuid": "a98c03fc05704e169e3b4c95ed6f96fd",
"name": "{#NAME} queued",
"type": "DEPENDENT",
"key": "graylog.tasks[{#NAME},queued]",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#NAME}.queued')].metric.value.first()"
]
},
{
"type": "SIMPLE_CHANGE"
}
],
"master_item": {
"key": "graylog.buffers"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "buffers"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "tasks"
},
{
"tag": "type",
"value": "gauge"
}
]
}
],
"graph_prototypes": [
{
"uuid": "94cb5719af004347bd4985df2ce33f27",
"name": "Processor tasks {#NAME}",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.tasks[{#NAME},active]"
}
},
{
"sortorder": "1",
"color": "274482",
"yaxisside": "RIGHT",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.tasks[{#NAME},completed]"
}
},
{
"sortorder": "2",
"color": "F63100",
"yaxisside": "RIGHT",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.tasks[{#NAME},queued]"
}
}
]
}
],
"master_item": {
"key": "graylog.buffers"
},
"lld_macro_paths": [
{
"lld_macro": "{#NAME}",
"path": "$.name"
}
],
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics[?(@.type == 'gauge' && @.full_name =~ '.tasks')]"
]
},
{
"type": "JAVASCRIPT",
"parameters": [
"const grouped = {};\nvar jvmArray = JSON.parse(value);\n var metrics = jvmArray;\n var i;\n\n for (i = 0; i < metrics.length; i++) {\n var entry = metrics[i];\n var fullName = entry.full_name;\n var value = entry.metric.value;\n\n var parts = fullName.split(\".\");\n var metricName = parts[parts.length - 1]; // e.g., \"used\"\n var groupKey = parts.slice(0, parts.length - 1).join(\".\"); // e.g., \"jvm.memory.pools.G1-Old-Gen\"\n\n if (!grouped[groupKey]) {\n grouped[groupKey] = {};\n }\n\n grouped[groupKey][metricName] = value;\n }\n var result = [];\n for (var key in grouped) {\n if (grouped.hasOwnProperty(key)) {\n result.push({\n name: key,\n metrics: grouped[key]\n });\n }\n }\n\n return JSON.stringify(result)"
]
}
]
},
{
"uuid": "6f3fb38e03634f7ca33e5fff2ce0b190",
"name": "meter-timer",
"type": "DEPENDENT",
"key": "graylog.input.syslog.meter",
"item_prototypes": [
{
"uuid": "c4e890da44a74321b1eaa8c064232247",
"name": "{#TYPE} time max {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},max]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.max.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "a8ae41f58e0e4c658ed6f52011be687e",
"name": "{#TYPE} time mean {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},mean]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.mean.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "6dd58485ac2a4afba8cddfcb8738304d",
"name": "{#TYPE} time min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},min]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.min.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "59464be0a08548b1ac4f493e1feac997",
"name": "{#TYPE} rate 1min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},rate,1min]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.one_minute.first()"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "16bea432b80747008f469f41e1eeccfa",
"name": "{#TYPE} rate 5min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},rate,5min]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.five_minute.first()"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "6b5473d5645347168348b9d2d1f75760",
"name": "{#TYPE} rate 15min {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},rate,15min]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.fifteen_minute.first()"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "d81b7374dde9400cb2dd13c4e0d657a6",
"name": "{#TYPE} rate mean {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},rate,mean]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.mean.first()"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "05231efe384b4657bf3fe8acc805d81a",
"name": "{#TYPE} rate total {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},rate,total]",
"value_type": "FLOAT",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.rate.total.first()"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "rate"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
},
{
"uuid": "3148d0dc65dd487abf7b0e43985b4e97",
"name": "{#TYPE} time std_dev {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\1\\4\\5\")}",
"type": "DEPENDENT",
"key": "graylog.input.syslog[{#FULLNAME},std_dev]",
"value_type": "FLOAT",
"status": "DISABLED",
"discover": "NO_DISCOVER",
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics.[?(@.full_name == '{#FULLNAME}')].metric.time.std_dev.first()"
]
},
{
"type": "MULTIPLIER",
"parameters": [
"1.0E-6"
]
}
],
"master_item": {
"key": "graylog.syslog"
},
"tags": [
{
"tag": "application",
"value": "graylog"
},
{
"tag": "component",
"value": "syslog"
},
{
"tag": "id",
"value": "{{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(SyslogUDPInput\\.)(([^\\.]{0,20})([^\\.]{0,4}))(\\..*)\",\"\\2\")}"
},
{
"tag": "name",
"value": "{#NAME}"
},
{
"tag": "subtype",
"value": "time"
},
{
"tag": "type",
"value": "{#TYPE}"
}
]
}
],
"graph_prototypes": [
{
"uuid": "500aecc3e60d4c639fbc826d0530f68b",
"name": "{#TYPE} rate {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(.*)\",\"\\1\")} Events per Second",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},rate,1min]"
}
},
{
"sortorder": "1",
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},rate,5min]"
}
},
{
"sortorder": "2",
"color": "F63100",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},rate,15min]"
}
},
{
"sortorder": "3",
"color": "2774A4",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},rate,mean]"
}
}
]
},
{
"uuid": "9856aab414d14a9a9574beaf5ae2e650",
"name": "{#TYPE} time {{#FULLNAME}.regsub(\"^org\\.graylog2\\.inputs\\.syslog\\.udp\\.(.*)\",\"\\1\")} Microseconds",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},max]"
}
},
{
"sortorder": "1",
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},mean]"
}
},
{
"sortorder": "2",
"color": "F63100",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},min]"
}
},
{
"sortorder": "3",
"color": "2774A4",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.input.syslog[{#FULLNAME},std_dev]"
}
}
],
"discover": "NO_DISCOVER"
}
],
"master_item": {
"key": "graylog.syslog"
},
"lld_macro_paths": [
{
"lld_macro": "{#FULLNAME}",
"path": "$.full_name"
},
{
"lld_macro": "{#NAME}",
"path": "$.name"
},
{
"lld_macro": "{#TYPE}",
"path": "$.type"
}
],
"preprocessing": [
{
"type": "JSONPATH",
"parameters": [
"$.metrics[?((@.type == 'meter' || @.type == 'timer') && @.full_name =~ '{$GRAYLOG.INPUTS.SYSLOG.IDS}')]"
]
}
],
"overrides": [
{
"name": "timer only item prototypes",
"step": "1",
"filter": {
"conditions": [
{
"macro": "{#TYPE}",
"value": "timer"
}
]
},
"operations": [
{
"operator": "LIKE",
"value": "timer",
"discover": "DISCOVER",
"status": "ENABLED"
}
]
},
{
"name": "create timer graphs",
"step": "2",
"filter": {
"conditions": [
{
"macro": "{#TYPE}",
"value": "timer"
}
]
},
"operations": [
{
"operationobject": "GRAPH_PROTOTYPE",
"operator": "LIKE",
"value": "time",
"discover": "DISCOVER"
}
]
}
]
}
],
"tags": [
{
"tag": "application",
"value": "graylog"
}
],
"macros": [
{
"macro": "{$GRAYLOG.BUFFER.HIGH:\"input\"}",
"value": "10"
},
{
"macro": "{$GRAYLOG.BUFFER.HIGH:\"output\"}",
"value": "10"
},
{
"macro": "{$GRAYLOG.BUFFER.HIGH:\"process\"}",
"value": "10"
},
{
"macro": "{$GRAYLOG.BUFFER.MAX:\"input\"}",
"value": "10"
},
{
"macro": "{$GRAYLOG.BUFFER.MAX:\"output\"}",
"value": "10"
},
{
"macro": "{$GRAYLOG.BUFFER.MAX:\"process\"}",
"value": "10"
},
{
"macro": "{$GRAYLOG.INPUT.USAGE.WARN}",
"value": "100",
"description": "Warning if input usage exceeds this value"
},
{
"macro": "{$GRAYLOG.INPUTS.SYSLOG.IDS}",
"value": ".*"
},
{
"macro": "{$GRAYLOG.PROCESS.USAGE.WARN}",
"value": "100",
"description": "Warning if process usage exceeds this value"
}
],
"dashboards": [
{
"uuid": "0bd110fa66654fb4a3980d5c2ac302f2",
"name": "Graylog Metrics",
"auto_start": "NO",
"pages": [
{
"name": "buffers",
"widgets": [
{
"type": "graphprototype",
"y": "1",
"width": "72",
"height": "18",
"fields": [
{
"type": "INTEGER",
"name": "columns",
"value": "1"
},
{
"type": "GRAPH_PROTOTYPE",
"name": "graphid.0",
"value": {
"host": "Graylog",
"name": "Buffers {#NAME}"
}
},
{
"type": "STRING",
"name": "reference",
"value": "QLKSX"
},
{
"type": "INTEGER",
"name": "rows",
"value": "3"
}
]
}
]
},
{
"name": "Timer",
"widgets": [
{
"type": "graphprototype",
"name": "Timers",
"y": "1",
"width": "72",
"height": "18",
"fields": [
{
"type": "INTEGER",
"name": "columns",
"value": "1"
},
{
"type": "GRAPH_PROTOTYPE",
"name": "graphid.0",
"value": {
"host": "Graylog",
"name": "{#TYPE} time {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")} microrseconds"
}
},
{
"type": "STRING",
"name": "reference",
"value": "PDUEV"
},
{
"type": "INTEGER",
"name": "rows",
"value": "3"
}
]
}
]
},
{
"name": "Meter",
"widgets": [
{
"type": "graphprototype",
"name": "Meter",
"y": "1",
"width": "71",
"height": "25",
"fields": [
{
"type": "INTEGER",
"name": "columns",
"value": "1"
},
{
"type": "GRAPH_PROTOTYPE",
"name": "graphid.0",
"value": {
"host": "Graylog",
"name": "{#TYPE} rate {{#FULLNAME}.regsub(\"^org\\.graylog2\\.buffers\\.(.*)\",\"\\1\")} Events per Second"
}
},
{
"type": "STRING",
"name": "reference",
"value": "CNPGD"
},
{
"type": "INTEGER",
"name": "rows",
"value": "5"
}
]
}
]
},
{
"name": "JVM",
"widgets": [
{
"type": "graphprototype",
"y": "1",
"width": "72",
"height": "24",
"fields": [
{
"type": "INTEGER",
"name": "columns",
"value": "1"
},
{
"type": "GRAPH_PROTOTYPE",
"name": "graphid.0",
"value": {
"host": "Graylog",
"name": "JVM {#NAME}"
}
},
{
"type": "STRING",
"name": "reference",
"value": "JOMAQ"
},
{
"type": "INTEGER",
"name": "rows",
"value": "4"
}
]
}
]
},
{
"name": "Log4j",
"widgets": [
{
"type": "graphprototype",
"y": "1",
"width": "72",
"height": "25",
"fields": [
{
"type": "INTEGER",
"name": "columns",
"value": "1"
},
{
"type": "GRAPH_PROTOTYPE",
"name": "graphid.0",
"value": {
"host": "Graylog",
"name": "Log4j {#FULLNAME}"
}
},
{
"type": "STRING",
"name": "reference",
"value": "SENTG"
},
{
"type": "INTEGER",
"name": "rows",
"value": "4"
}
]
}
]
},
{
"name": "Journal",
"widgets": [
{
"type": "graph",
"width": "72",
"height": "7",
"fields": [
{
"type": "GRAPH",
"name": "graphid.0",
"value": {
"host": "Graylog",
"name": "Journal"
}
},
{
"type": "STRING",
"name": "reference",
"value": "YPVVP"
}
]
}
]
}
]
}
]
}
],
"graphs": [
{
"uuid": "9b9594e27de44da1bc0589456e9583cb",
"name": "Journal",
"graph_items": [
{
"color": "1A7C11",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.journal[org.graylog2.journal.append.1-sec-rate]"
}
},
{
"sortorder": "1",
"color": "274482",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.journal[org.graylog2.journal.entries-uncommitted]"
}
},
{
"sortorder": "2",
"color": "F63100",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.journal[org.graylog2.journal.read.1-sec-rate]"
}
},
{
"sortorder": "3",
"drawtype": "BOLD_LINE",
"color": "6C59DC",
"yaxisside": "RIGHT",
"calc_fnc": "ALL",
"item": {
"host": "Graylog",
"key": "graylog.journal[org.graylog2.journal.utilization-ratio]"
}
}
]
}
]
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment