Change defaut facility fron nginx logs

Graylog Central (peer support)
1

Hi,

I’m using graylog 2.4.6, and configured nginx servers to send logs to it.

log_format  graylog2_format  '$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" "$http_x_forwarded_for" <msec=$msec|connection=$connection|connection_requests=$connection_requests|millis=$request_time>';

access_log syslog:server=graylog-lb:12301 graylog2_format;

The logs are received, and everything is working just great,
Is it possible to change the facility of the nginx logs?
Currently it’s registered under facility local7.

2

Yes, I think so, but you’ll have to configure that in nginx :slight_smile:

3

@benvanstaveren
what exactly should be changed in nginx?

4

LMGTFY…

^F “facility”

2 Likes
5

Thanks, not sure how I missed it in the docs :confused:

1 Like
6

No worries Boris, I hope you got things to work.

7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.