Graylog. API

HTTP

http://192.168.199.228:9000/api/api-browser#!/Search/Keyword/searchKeywordChunked_get_1

Curl

curl -s -u service:95service1 -H 'Accept: application/json' 'http://192.168.199.228:9000/api/search/universal/keyword?query=source%3A192.168.199.16%20AND%20(message%3A%22*No%20connection%20to%20VR%20Server*%22)&keyword=Last%20day&decorate=true' | jq ".messages"

Shell

nano zabbixGetGraylogError.sh

#!/bin/bash
graylogIp="192.168.199.228"
graylogPort="9000"
graylogApiBaseUrl="http://${graylogIp}:${graylogPort}/api"
graylogUser="service"
graylogPass="PassWord"
#graylogApiQuery=$1
graylogApiQuery="source%3A192.168.199.16%20AND%20(message%3A%22*No%20connection%20to%20VR%20Server*%22)&keyword=Last%20day&decorate=true"
#graylogApiQuery="source%3A192.168.199.16%20AND%20(message%3A%22*RPO*%22)&keyword=Last%20day&decorate=true"
#graylogApiQuery="source%3A192.168.199.16%20AND%20(message%3A%22*error*%22)&keyword=Last%20day&decorate=true"
# debug
#echo ${graylogApiQuery}
curl -s -u ${graylogUser}:${graylogPass} -H 'Accept: application/json' \
"${graylogApiBaseUrl}/search/universal/keyword?query=${graylogApiQuery}" \
| jq ".messages" | jq ".[]" | jq ".message" | jq ".message"