I am using ubuntu 20.04 and graylog 4.2.6.
I’m currently receiving multiple logs from one server to syslog and gelf and I have several of these servers.
Now I want to get logs of slow queries in mariadb, but most people seem to use sidecar.
But I’d like to use gelf rather than sidecar if possible.
It seems difficult because rsyslog is already being used for sending other logs.
What do I need to put in the script to extract the log to gelf?
I need your help as I’m not very good with shell scripts and greylogs.
Sidecar is just a wrapper for “Winlogbeat, FileBeat, MetricBeat, Nxlog”, you can install these separate.
Example for Nxlog you can use this to pick up MongoDb Slow Query logs
Exec $Message = $raw_event;
- input_type: log
Hope that helps
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.