Hey everyone, I am super super new (as in that I got it all installed today) to Graylog and I couldnt find a straight answer that I thought I would ask. My boss wants us to monitor the unattended-upgrades log file on our linux servers we have it configured on but I am not sure how to go about setting up monitoring for this particular log file. It is in /var/log/unattended-upgrades/unattended-upgrades.log
Can anyone guide me on what I need to setup or accomplish in graylog to get these logs to appear? I got the SYSLOG UDP setup and works great…just no clue how to do this since there is no preset for it.
Anything would help greatly!