Send a specific log to grayling


this is my situation:
send log from /var/log/esb/*.log to graylog (with syslog, via tcp).

At this moment, it receive CRON and the others standard log. I try with this config, but not work ->

 *.* @@ip:port;GRAYLOGRFC5424 
 *.* -/var/log/esb/*.log 


What do you think this configuration snippet for rsyslog is doing?

If the log files at /var/log/esb/*.log are written by another application, you might want to take a look a the rsyslog Text File Input Module:

Of course you could also use something like Filebeat to read those text files and send them to Graylog (with a Beats input).

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.