- Create a read-only user in your Graylog instance
- Get the status and health from the API:
curl http://${GL_USER}:${GL_PWD}@localhost:9000/api/system/indexer/cluster/health 2>/dev/null
- Parse the JSON in your Monitoring-System
- Trigger if
health
is notgreen
- Get the status and health from the API:
curl http://localhost:9200/_cluster/health 2>/dev/null
- Parse the JSON in your Monitoring-System
- Trigger if
status
is notgreen
Check-out the graylog_journal_size.sh
script.
Alternatively you can query the API.
You might trigger if the journal is >50% full. This indicates that the Graylog instance is not able to process all the logs it receives.