Send a specific log to grayling


(Pbhenny) #1

Hi,

this is my situation:
send log from /var/log/esb/*.log to graylog (with syslog, via tcp).

At this moment, it receive CRON and the others standard log. I try with this config, but not work ->

 *.* @@ip:port;GRAYLOGRFC5424 
 *.* -/var/log/esb/*.log 

thanks


(Jochen) #2

What do you think this configuration snippet for rsyslog is doing?

If the log files at /var/log/esb/*.log are written by another application, you might want to take a look a the rsyslog Text File Input Module: http://www.rsyslog.com/doc/v8-stable/configuration/modules/imfile.html

Of course you could also use something like Filebeat to read those text files and send them to Graylog (with a Beats input).


(system) #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.