Send a specific log to grayling

[pbhenny]

Hi,

this is my situation:
send log from /var/log/esb/*.log to graylog (with syslog, via tcp).

At this moment, it receive CRON and the others standard log. I try with this config, but not work ->

 *.* @@ip:port;GRAYLOGRFC5424 
 *.* -/var/log/esb/*.log 

thanks

[jochen]

What do you think this configuration snippet for rsyslog is doing?

If the log files at /var/log/esb/*.log are written by another application, you might want to take a look a the rsyslog Text File Input Module: http://www.rsyslog.com/doc/v8-stable/configuration/modules/imfile.html

Of course you could also use something like Filebeat to read those text files and send them to Graylog (with a Beats input).