{ "v": "1", "id": "8a1bf564-8d9b-4912-b5b5-cdf9e8d2bdd2", "rev": 1, "name": "MikroTik (mikr)", "summary": "Stream and dashboard for the router logs MikroTik Manager forwards", "description": "A stream that takes the lines MikroTik Manager forwards (matched by the address they come from) and a dashboard for them: errors and warnings, sign-ins, failed sign-ins, configuration changed by a person, links going down. Needs a Syslog UDP input. See https://mikr.app/docs/graylog.html", "vendor": "MikroTik Manager", "url": "https://mikr.app/docs/graylog.html", "parameters": [ { "name": "MANAGER_ADDRESS", "title": "MikroTik Manager address", "description": "The IP address the manager sends syslog from, as Graylog sees it (gl2_remote_ip).", "type": "string", "default_value": "192.0.2.10" } ], "entities": [ { "id": "ecd423e1-5c6e-432b-a4c3-3b1c94409da5", "type": { "name": "stream", "version": "1" }, "v": "1", "data": { "title": { "@type": "string", "@value": "MikroTik (mikr)" }, "description": { "@type": "string", "@value": "Router logs forwarded by MikroTik Manager" }, "disabled": { "@type": "boolean", "@value": false }, "matching_type": { "@type": "string", "@value": "AND" }, "stream_rules": [ { "type": { "@type": "string", "@value": "EXACT" }, "field": { "@type": "string", "@value": "gl2_remote_ip" }, "value": { "@type": "parameter", "@value": "MANAGER_ADDRESS" }, "inverted": { "@type": "boolean", "@value": false }, "description": { "@type": "string", "@value": "Lines sent by MikroTik Manager" } } ], "alert_conditions": [], "alarm_callbacks": [], "outputs": [], "default_stream": { "@type": "boolean", "@value": false }, "remove_matches": { "@type": "boolean", "@value": false }, "favorite_fields": null }, "constraints": [ { "type": "server-version", "version": ">=7.2.0" } ] }, { "id": "0730d086-e733-4873-b111-44ef36898904", "type": { "name": "dashboard", "version": "2" }, "v": "1", "data": { "type": "DASHBOARD", "title": { "@type": "string", "@value": "MikroTik (mikr)" }, "summary": { "@type": "string", "@value": "Router logs forwarded by MikroTik Manager" }, "description": { "@type": "string", "@value": "Lines MikroTik Manager forwards, with the router's name as source. https://mikr.app/docs/graylog.html" }, "search": { "queries": [ { "id": "41c1fd67-bfbf-4677-9b75-4a9642b03a5a", "timerange": { "range": 86400, "type": "relative" }, "filter": { "type": "or", "filters": [ { "type": "stream", "id": "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" } ] }, "filters": [], "query": { "type": "elasticsearch", "query_string": "" }, "search_types": [ { "timerange": null, "query": null, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "86717492-618e-4d65-a0af-9ff6c3655401", "name": "chart", "series": [ { "type": "count", "id": "count()", "field": null } ], "sort": [ { "type": "series", "field": "count()", "direction": "Descending" } ], "rollup": true, "type": "pivot", "row_groups": [ { "type": "values", "fields": [ "source" ], "limit": 15, "skip_empty_values": false } ], "column_groups": [], "filter": null, "filters": [], "row_limit": null, "column_limit": null }, { "timerange": null, "query": { "type": "elasticsearch", "query_string": "message:\"link down\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "ed9406ad-0f79-4639-828b-ed8d71672ce8", "name": null, "limit": 150, "offset": 0, "decorators": [], "type": "messages", "filter": null, "filters": [] }, { "timerange": null, "query": { "type": "elasticsearch", "query_string": "level:<=4" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "afdd9980-7a90-4055-8688-f9fc3056fb78", "name": null, "limit": 150, "offset": 0, "decorators": [], "type": "messages", "filter": null, "filters": [] }, { "timerange": null, "query": { "type": "elasticsearch", "query_string": "level:<=4" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "7cf36e64-105d-4c55-97f6-d06ddaa80e38", "name": "chart", "series": [ { "type": "count", "id": "count()", "field": null } ], "sort": [ { "type": "series", "field": "count()", "direction": "Descending" } ], "rollup": true, "type": "pivot", "row_groups": [ { "type": "values", "fields": [ "source" ], "limit": 15, "skip_empty_values": false } ], "column_groups": [], "filter": null, "filters": [], "row_limit": null, "column_limit": null }, { "timerange": null, "query": { "type": "elasticsearch", "query_string": "message:\"login failure\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "29ad5383-e918-4ca0-9f56-0cf32f3b06e7", "name": null, "limit": 150, "offset": 0, "decorators": [], "type": "messages", "filter": null, "filters": [] }, { "timerange": null, "query": null, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "3b1073f7-fb83-46df-a08c-c43585d750c8", "name": "chart", "series": [ { "type": "count", "id": "count()", "field": null } ], "sort": [], "rollup": true, "type": "pivot", "row_groups": [ { "type": "time", "fields": [ "timestamp" ], "interval": { "type": "auto", "scaling": 1.0 } } ], "column_groups": [ { "type": "values", "fields": [ "level" ], "limit": 10, "skip_empty_values": false } ], "filter": null, "filters": [], "row_limit": null, "column_limit": null }, { "timerange": null, "query": { "type": "elasticsearch", "query_string": "(message:\"changed by\" OR message:\"added by\" OR message:\"removed by\") AND NOT message:scheduler\\:* AND NOT message:script\\:* AND NOT message:\"removed by user\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "f3d84262-5341-41a5-9ff9-600ca61e3489", "name": null, "limit": 150, "offset": 0, "decorators": [], "type": "messages", "filter": null, "filters": [] }, { "timerange": null, "query": null, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "ecfe92ff-f506-4ba1-8dfa-11ca742beea4", "name": null, "limit": 150, "offset": 0, "decorators": [], "type": "messages", "filter": null, "filters": [] }, { "timerange": null, "query": { "type": "elasticsearch", "query_string": "message:\"logged in\" AND NOT message:\"via api\" AND NOT message:\"via rest-api\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "id": "1a24a95c-0f9b-45d2-8cba-e8b8cdd3e943", "name": null, "limit": 150, "offset": 0, "decorators": [], "type": "messages", "filter": null, "filters": [] } ] } ], "parameters": [], "requires": {}, "owner": "admin", "created_at": "2026-11-04T09:24:29.134Z" }, "properties": [], "requires": {}, "state": { "41c1fd67-bfbf-4677-9b75-4a9642b03a5a": { "selected_fields": null, "static_message_list_id": null, "titles": { "widget": { "0bed174c-56b4-4f62-8295-d175d65d9b18": "Messages by level (0 emergency to 7 debug)", "25b019c9-1e2c-4cd5-b263-dd2a80fc7e52": "Errors and warnings by device", "c152647e-7cb9-4e10-a370-4c9dc0f5de2a": "All lines by device", "da79748b-3596-4bd5-9e87-e2e63ce37447": "Latest errors and warnings", "81ab58ef-3da0-4093-802b-365f03e14c76": "Failed sign-ins", "b52e3bd6-6dee-4053-a264-c5ab43eedbff": "Sign-ins (API sign-ins left out)", "11b7c034-ed07-475a-a5ee-8f6b83000d37": "Configuration changed by a person", "0374961f-216b-4052-863e-127621ec6cf1": "Links going down", "3e427251-04a6-4ea9-b7da-1b0f00d226fa": "All lines" } }, "widgets": [ { "id": "25b019c9-1e2c-4cd5-b263-dd2a80fc7e52", "type": "aggregation", "filter": null, "filters": [], "timerange": null, "query": { "type": "elasticsearch", "query_string": "level:<=4" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "row_pivots": [ { "fields": [ "source" ], "type": "values", "config": { "limit": 15 } } ], "units": {}, "column_pivots": [], "series": [ { "config": { "name": null, "thresholds": [] }, "function": "count()" } ], "sort": [ { "type": "series", "field": "count()", "direction": "Descending" } ], "visualization": "table", "visualization_config": null, "formatting_settings": null, "rollup": true, "event_annotation": false, "row_limit": 15, "column_limit": null }, "description": null, "context": null }, { "id": "da79748b-3596-4bd5-9e87-e2e63ce37447", "type": "messages", "filter": null, "filters": [], "timerange": null, "query": { "type": "elasticsearch", "query_string": "level:<=4" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "fields": [ "timestamp", "source", "level", "message" ], "units": {}, "show_message_row": false, "show_summary": false, "decorators": [], "sort": [ { "type": "pivot", "field": "timestamp", "direction": "Descending" } ] }, "description": null, "context": null }, { "id": "b52e3bd6-6dee-4053-a264-c5ab43eedbff", "type": "messages", "filter": null, "filters": [], "timerange": null, "query": { "type": "elasticsearch", "query_string": "message:\"logged in\" AND NOT message:\"via api\" AND NOT message:\"via rest-api\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "fields": [ "timestamp", "source", "level", "message" ], "units": {}, "show_message_row": false, "show_summary": false, "decorators": [], "sort": [ { "type": "pivot", "field": "timestamp", "direction": "Descending" } ] }, "description": null, "context": null }, { "id": "0374961f-216b-4052-863e-127621ec6cf1", "type": "messages", "filter": null, "filters": [], "timerange": null, "query": { "type": "elasticsearch", "query_string": "message:\"link down\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "fields": [ "timestamp", "source", "level", "message" ], "units": {}, "show_message_row": false, "show_summary": false, "decorators": [], "sort": [ { "type": "pivot", "field": "timestamp", "direction": "Descending" } ] }, "description": null, "context": null }, { "id": "3e427251-04a6-4ea9-b7da-1b0f00d226fa", "type": "messages", "filter": null, "filters": [], "timerange": null, "query": null, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "fields": [ "timestamp", "source", "level", "message" ], "units": {}, "show_message_row": false, "show_summary": false, "decorators": [], "sort": [ { "type": "pivot", "field": "timestamp", "direction": "Descending" } ] }, "description": null, "context": null }, { "id": "11b7c034-ed07-475a-a5ee-8f6b83000d37", "type": "messages", "filter": null, "filters": [], "timerange": null, "query": { "type": "elasticsearch", "query_string": "(message:\"changed by\" OR message:\"added by\" OR message:\"removed by\") AND NOT message:scheduler\\:* AND NOT message:script\\:* AND NOT message:\"removed by user\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "fields": [ "timestamp", "source", "level", "message" ], "units": {}, "show_message_row": false, "show_summary": false, "decorators": [], "sort": [ { "type": "pivot", "field": "timestamp", "direction": "Descending" } ] }, "description": null, "context": null }, { "id": "0bed174c-56b4-4f62-8295-d175d65d9b18", "type": "aggregation", "filter": null, "filters": [], "timerange": null, "query": null, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "row_pivots": [ { "fields": [ "timestamp" ], "type": "time", "config": { "interval": { "type": "auto", "scaling": 1.0 } } } ], "units": {}, "column_pivots": [ { "fields": [ "level" ], "type": "values", "config": { "limit": 10 } } ], "series": [ { "config": { "name": null, "thresholds": [] }, "function": "count()" } ], "sort": [], "visualization": "bar", "visualization_config": { "barmode": "stack", "axis_type": "linear", "axis_config": null }, "formatting_settings": null, "rollup": true, "event_annotation": false, "row_limit": null, "column_limit": 10 }, "description": null, "context": null }, { "id": "c152647e-7cb9-4e10-a370-4c9dc0f5de2a", "type": "aggregation", "filter": null, "filters": [], "timerange": null, "query": null, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "row_pivots": [ { "fields": [ "source" ], "type": "values", "config": { "limit": 15 } } ], "units": {}, "column_pivots": [], "series": [ { "config": { "name": null, "thresholds": [] }, "function": "count()" } ], "sort": [ { "type": "series", "field": "count()", "direction": "Descending" } ], "visualization": "table", "visualization_config": null, "formatting_settings": null, "rollup": true, "event_annotation": false, "row_limit": 15, "column_limit": null }, "description": null, "context": null }, { "id": "81ab58ef-3da0-4093-802b-365f03e14c76", "type": "messages", "filter": null, "filters": [], "timerange": null, "query": { "type": "elasticsearch", "query_string": "message:\"login failure\"" }, "streams": [ "ecd423e1-5c6e-432b-a4c3-3b1c94409da5" ], "stream_categories": [], "config": { "fields": [ "timestamp", "source", "level", "message" ], "units": {}, "show_message_row": false, "show_summary": false, "decorators": [], "sort": [ { "type": "pivot", "field": "timestamp", "direction": "Descending" } ] }, "description": null, "context": null } ], "widget_mapping": { "0bed174c-56b4-4f62-8295-d175d65d9b18": [ "3b1073f7-fb83-46df-a08c-c43585d750c8" ], "25b019c9-1e2c-4cd5-b263-dd2a80fc7e52": [ "7cf36e64-105d-4c55-97f6-d06ddaa80e38" ], "c152647e-7cb9-4e10-a370-4c9dc0f5de2a": [ "86717492-618e-4d65-a0af-9ff6c3655401" ], "da79748b-3596-4bd5-9e87-e2e63ce37447": [ "afdd9980-7a90-4055-8688-f9fc3056fb78" ], "81ab58ef-3da0-4093-802b-365f03e14c76": [ "29ad5383-e918-4ca0-9f56-0cf32f3b06e7" ], "b52e3bd6-6dee-4053-a264-c5ab43eedbff": [ "1a24a95c-0f9b-45d2-8cba-e8b8cdd3e943" ], "11b7c034-ed07-475a-a5ee-8f6b83000d37": [ "f3d84262-5341-41a5-9ff9-600ca61e3489" ], "0374961f-216b-4052-863e-127621ec6cf1": [ "ed9406ad-0f79-4639-828b-ed8d71672ce8" ], "3e427251-04a6-4ea9-b7da-1b0f00d226fa": [ "ecfe92ff-f506-4ba1-8dfa-11ca742beea4" ] }, "positions": { "0bed174c-56b4-4f62-8295-d175d65d9b18": { "col": 1, "row": 1, "height": 3, "width": "Infinity" }, "25b019c9-1e2c-4cd5-b263-dd2a80fc7e52": { "col": 1, "row": 4, "height": 4, "width": 6 }, "c152647e-7cb9-4e10-a370-4c9dc0f5de2a": { "col": 7, "row": 4, "height": 4, "width": 6 }, "da79748b-3596-4bd5-9e87-e2e63ce37447": { "col": 1, "row": 8, "height": 5, "width": "Infinity" }, "81ab58ef-3da0-4093-802b-365f03e14c76": { "col": 1, "row": 13, "height": 5, "width": 6 }, "b52e3bd6-6dee-4053-a264-c5ab43eedbff": { "col": 7, "row": 13, "height": 5, "width": 6 }, "11b7c034-ed07-475a-a5ee-8f6b83000d37": { "col": 1, "row": 18, "height": 5, "width": "Infinity" }, "0374961f-216b-4052-863e-127621ec6cf1": { "col": 1, "row": 23, "height": 4, "width": "Infinity" }, "3e427251-04a6-4ea9-b7da-1b0f00d226fa": { "col": 1, "row": 27, "height": 6, "width": "Infinity" } }, "formatting": { "highlighting": [] }, "display_mode_settings": { "positions": {} } } }, "owner": null, "created_at": "2026-11-04T09:24:29.154Z" }, "constraints": [ { "type": "server-version", "version": ">=7.2.0" } ] } ] }