Hello everyone, I’ve asked this question before but because of some reasons, i can’t manage the topic, so I think that, fresh topic will be more useful for everyone. I have graylog2 in my CentOS 7 server and now I can collect all log datas with this server. And I have just finished Wordpress serv…

[image] egetkn: I’ve asked this question before but because of some reasons, i can’t manage the topic Topics are automatically closed 14 days after the last reply. You also didn’t reply to the questions in Send Wordpress audit logs to Graylog

Yes, as I said because of some personal reasons I can’t work :frowning:

Hey @egetkn , how about answering the questions now? :slight_smile: [image] Send Wordpress audit logs to Graylog Graylog Central (peer support) How exactly is WordPress storing its audit logs? How can you access them from outside of WordPress?

Sure :slight_smile: I think it stores somewhere inside of wordpress files or in the database of wordpress server. I can use bash script to reach Wordpress or I can find a way, this is easy part actually :slight_smile: . I need finout a way to send it. Here is my wordpress admin panes and the can s…

[image] egetkn: I need finout a way to send it. If you have access to the audit log entries, you can use any format and protocol Graylog supports, such as GELF, Syslog (RFC 5424), or new-line separated plaintext, to send them to Graylog and process them further.

The question is, how ı will reach Wordpress log files and the config file of these logs have no ip adressing module. For example, in rsys logs, there are some settings that I can send them a specific IP adress and port but in this case, there nothing someting like this :frowning:

[image] egetkn: The question is, how ı will reach Wordpress log files and the config file of these logs have no ip adressing module. What does that mean exactly. Please elaborate.

So here is the deal; Finally, I can find where wordpress stores it’s logs :slight_smile: they are in MySQL database and now I need to send them to graylog :slight_smile: . [Screenshot from 2017-10-18 15-22-56] As they can see from the SS, audit collect logs like this. My final question is, how I…

[image] egetkn: My final question is, how I can import this databased log to Graylog2 server ? You could use Logstash with its JDBC input and GELF output for this. Jdbc input plugin | Logstash Reference [8.11] | Elastic Gelf output plugin | Logstash Reference [8.11] | Elastic

Hi again Jochen, Do you know somewhere I can find better instructions. Thanks again…

Send Wordpress server audit logs to Graylog

Graylog Central (peer support)

derPhlipsi (Philipp Ruland) October 18, 2017, 9:51am 4

Hey @egetkn,

how about answering the questions now?

Topic		Replies	Views
Send Wordpress audit logs to Graylog Graylog Central (peer support)	1	1006	September 27, 2017
Plugin wordpress for graylog Graylog Add-ons	3	2665	February 20, 2018
Graylog Web Login Logs Graylog Central (peer support)	4	2896	March 21, 2017
Sending VPS Apache and Mysql Logs to Graylog on a Local Network without Port-Forwarding Graylog Central (peer support)	3	788	August 22, 2020
Graylog input for postgres Graylog Central (peer support)	2	5053	August 5, 2020

Send Wordpress server audit logs to Graylog

Related topics