Where graylog store rhe Recived logs-files

Graylog Central (peer support)
1

Hello,
I use graylog under the debian Linux system and everything is perfect. But the question is where store received files from Windows (event logs files) . Because I want to change the storage path to a private disk or local disk as Archive.
Thanks

1 Like
2

Hi, Immanuel

All log messages ingested by Graylog are indexed in Elasticsearch.

3

Hi bahram,
You mean in path…??
/var/lib/elasticsearch
/var/log/elasticsearch

But i Need exactly where save it??
And change storage path under Linux System??
Thanks

4

curl -XGET http://127.0.0.1:9200
/var/lib/elasticsearch/nodes/0/indices

1 Like
5

Thanks you so much
I found it.

And I try to change path in another Media like disk.

Best regards

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.