How to save all incoming syslog to Graylog-server

jochen · September 28, 2017, 10:05am

Please refer to the aforementioned syslog guide for how to configure forwarding syslog messages to Graylog:

Graylog2/graylog-guide-syslog-linux/blob/master/README.md#rsyslog

## Sending syslog from Linux systems into Graylog

The two most popular syslog deamons (the programs that run in the background to accept and write or forward logs) are [rsyslog](https://www.rsyslog.com/) and [syslog-ng](https://syslog-ng.com/). One of these will most likely be running on your Linux distribution.

Please refer to the documentation of your distribution if you are not sure about this.

### ⚠️ Warning ⚠️

**These instructions configure rsyslog and syslog-ng to send log messages _unencrypted_ over the network. This is generally not recommended on public networks.**

### rsyslog

Forwarding syslog messages with rsyslog is easy. The only important thing to get the most out of your logs is following
[RFC 5424](http://www.ietf.org/rfc/rfc5424.txt). The following examples configure your `rsyslog` daemon to send
RFC 5424 date to Graylog syslog inputs:

##### UDP:

    *.* @graylog.example.org:514;RSYSLOG_SyslogProtocol23Format

This file has been truncated. show original

The used message format is relevant (i. e. you’re missing the template in your forwarding directive).

Topic		Replies	Views
Send syslog messages from Graylog host server to Graylog itself Graylog Central (peer support)	4	4267	May 31, 2022
Can't send rsyslog Graylog Central (peer support)	14	2864	September 9, 2017
Issues with Syslog input Graylog Central (peer support)	21	7708	August 22, 2017
Syslog input from another host to Graylog server Graylog Central (peer support)	2	896	July 2, 2019
Graylog inputs do not seem to be working Graylog Central (peer support)	5	2915	September 7, 2018

How to save all incoming syslog to Graylog-server

Related topics