Where graylog store rhe Recived logs-files

Hello,
I use graylog under the debian Linux system and everything is perfect. But the question is where store received files from Windows (event logs files) . Because I want to change the storage path to a private disk or local disk as Archive.
Thanks

1 Like

Hi, Immanuel

All log messages ingested by Graylog are indexed in Elasticsearch.

Hi bahram,
You mean in path…??
/var/lib/elasticsearch
/var/log/elasticsearch

But i Need exactly where save it??
And change storage path under Linux System??
Thanks

curl -XGET http://127.0.0.1:9200
/var/lib/elasticsearch/nodes/0/indices

1 Like

Thanks you so much
I found it.

And I try to change path in another Media like disk.

Best regards

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.