please do not post multiple times with the same question …
the answer is here: Pointing Graylog to Log files
