Graylog3 internal logs

[ncmfn (nc)]

Hi @tellistone,
Tnx for your answer,
I have followed every stage. But I still didn’t get any results:

@tellistone

First you need to vim /etc/rsyslog.conf , and add the line $ModLoad imfile to the bottom of the Modules section

@tellistone

Create the file /etc/rsyslog.d/graylog.conf` Contents look like this:

Then using chmod I set reading permissions:

sudo chmod ugo+r log

then I reboot the whole server.
Finally, this is my input in graylog: