Everyone,
I hope such post here is actually allowed as it isn’t a question.
Over a few years I tested a few solutions to feed Apache access log into Graylog for further processing, however, none made me happy. Tried GELF module, nc and nxlog and no-one simply fits the purpose for me. It took me a while but I wrote something doing what I want - taking json formed by Apache, terminating lines as Graylog requires it and with some cleverness, sending it to Graylog listening for JSON on TCP listener. There is ability to failover between two Graylogs if that is desired.
Feel free to use it if you like or extend it further if you see something you could improve.
It can be found here: GitHub - darek-margas/json-graylog-tcp-logger: This is Graylog TCP logger written in C
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.