this is my situation:
send log from
/var/log/esb/*.log to graylog (with syslog, via tcp).
At this moment, it receive CRON and the others standard log. I try with this config, but not work ->
What do you think this configuration snippet for rsyslog is doing?
If the log files at
/var/log/esb/*.log are written by another application, you might want to take a look a the rsyslog Text File Input Module: http://www.rsyslog.com/doc/v8-stable/configuration/modules/imfile.html
Of course you could also use something like Filebeat to read those text files and send them to Graylog (with a Beats input).
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.