I want to analyze and store logs from a custom application in Graylog. Logs are send from app using log4net UDPAppender to a Raw UDP Input in Graylog. Then I use some GROk patterns to seperate data. This is all working fine.
But when the message strings contains german umlauts, I only see the � sign. I suppose this is related to wrong encoding (ISO vs. Unicode), but I cant find information in manual how to convert from a encoding to another. Is this possible?
Your logs should contains only UTF-8 strings. I think you need to convert it to UTF-8 before entering graylog. Try to use encoding utf-8 in log4net configuration: