Skip to content

Conversation

@bnazare
Copy link

@bnazare bnazare commented Nov 11, 2024

Proposed changes

  • Shipping of logs to Graylog via GELF

Related issues

There are no related issues but this subject has been previously discussed with Linkare within the scope of the OpenCTI implementation for the Centre for Cybersecurity Belgium (https://ccb.belgium.be/).

Checklist

  • I consider the submitted work as finished
  • I tested the code for its functionality
  • I wrote test cases for the relevant uses case
  • I added/update the relevant documentation (either on github or on notion)
  • Where necessary I refactored code to improve the overall quality

Further comments

We enabled the new functionality in the configuration of some of the existing test cases. However, there are currently no new assertions being made as that would require the set-up of an entire Graylog infrastructure during tests, which is a much more involved task. Effectively, this means that the new code is being exercised but all log shipping is being shipped to a closed port and any network errors are silently ignored.

@bnazare bnazare force-pushed the feature/log-shipping branch from c74db80 to ea44d04 Compare November 11, 2024 18:34
@bnazare bnazare force-pushed the feature/log-shipping branch from ea44d04 to a29589a Compare November 11, 2024 19:03
@bnazare
Copy link
Author

bnazare commented Nov 11, 2024

This PR is a counterpart to OpenCTI-Platform/opencti#8410.

@aHenryJard aHenryJard linked an issue Jan 17, 2025 that may be closed by this pull request
@aHenryJard aHenryJard changed the title Implement log shipping to Graylog via GELF Implement log shipping to Graylog via GELF (#809) Jan 17, 2025
@aHenryJard aHenryJard added the community use to identify PR from community label Mar 14, 2025
@JeremyCloarec
Copy link
Contributor

Conflicts will need to be resolved before being able to merge this PR

@nino-filigran
Copy link

Please be aware that we have added a "stalled" label on this PR since there's no movement since a while. Without any further update in coming month(s), we'll close this PR.

Thanks for your contribution.

@alice-debra
Copy link

Hello @bnazare,

We hope you're doing well! We noticed your pull request has been inactive for a while, and we wanted to check in to see if you need any assistance or have any questions.

We really value your contribution and would love to help you get it merged. If you're still interested in moving forward with this PR, please let us know if there's anything blocking you.

Timeline reminder: If we don't hear from you within 30 days, we'll mark this PR as stalled. Stalled PRs are automatically closed after an additional 30 days of inactivity. Don't worry though, you can always reopen it later if needed!

Please feel free to respond whenever you have time. We understand that life gets busy, and there's no pressure.

Thank you again for taking the time to contribute to our project. Your efforts help make our community better!

Kind regards,

Alice

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community use to identify PR from community Stalled

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement log shipping to Graylog via GELF

5 participants