mariussturm / graylog-plugin-output-neo4j Goto Github PK

Hi. I didn't have effects when i change neo4j's cypher query inside the Editing Output view in Graylog.

The query configured by plugin installation is:
MERGE (source:HOST { address: '${source}' })
MERGE (user_id:USER { user_id: '${user_id}'})
MERGE (source)-[:CONNECT]->(user_id)

I need to change the name of "HOST" node and the union with "USER" but is not work.

The plugin uses the 1.4 Neo4j driver, which is not compatible with Neo4j 4.x.
It would be great to switch to the 2.x driver series, which support both Neo4j 3.5 and 4.x server. I think using the 1.x drivers does not make sense anymore, as Neo4j versions < 3.5 are not supported anymore.

Would a PR help here ?

Hi @mariussturm

We are using Graylog 2.3 + Elasticsearch 5.5.0 + neo4j 3.2.2 versions for log monitoring application and we have installed neo4j output plugin in graylog to send the data to neo4j graph database.

we have configured the neo4j output with the connection details + Cypher queries. From the graylog streams section we could able to see the data is coming (i.e 40 messages/second) and then in the Manage Output we are trying to send the data to Neo4j graph database and I could see below error messages were thrown,

INFO [Neo4JBoltTransport] Identified 3 fields in graph create query.
INFO [Neo4jOutput] Neo4j output started!
ERROR [AbstractRotationStrategy] Cannot perform rotation at this moment.
ERROR [AbstractRotationStrategy] Cannot perform rotation at this moment.
ERROR [AbstractRotationStrategy] Cannot perform rotation at this moment.
WARN [NodePingThread] Did not find meta info of this node. Re-registering.
ERROR [AbstractRotationStrategy] Cannot perform rotation at this moment.
ERROR [AbstractRotationStrategy] Cannot perform rotation at this moment.

Please kindly help on this issue and let me know if you need any further informations.

Regards,
Ganeshbabu R