The syslog I tried was simply a rsyslog example with a file as input. Rsyslog.conf was like following line preceded by module imports : /path/to/file @@127.0.0.1:514 Does IT sends raw TCP in graylog words instead of syslog TCP ? The new line shall be fine as the file is a log4j output. (Multi lines stacktraces will be taken care of later)
As I am first looking for a mostly reliable log transport from production to a graylog, rsyslog and logstash are options. If you know a working configuration I would be happy to read it. Le 28 févr. 2014 22:40, "Lennart Koopmann" <[email protected]> a écrit : > Logstash is not supporting GELF TCP. That is because our gelf-rb gem > does not support TCP yet. It will soon and I am sure that Jordan will > take over that functionality in Logstash: > https://github.com/Graylog2/gelf-rb > > How did you try to send syslog? Make sure that you are using the > correct frame delimiter. It is newline by default but can be changed > to NUL byte in the input options. > > On Fri, Feb 28, 2014 at 4:32 PM, Nicolas Fédou <[email protected]> > wrote: > > Hello, > > I did not manage to get logs in graylog either from rsyslog (syslog tcp) > or > > logstash (gelf tcp)... > > I do receive some with logstash using gelf udp. > > > > I need somme tcp to avoid loosing logs. > > Do you know what are working configurations, where to look to see what's > > wrong ? > > > > Regards, Nicolas Fédou. > > > > PS : as in testing mode, all traffic is on 127.0.0.1. > > > > -- > > You received this message because you are subscribed to the Google Groups > > "graylog2" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [email protected]. > > For more options, visit https://groups.google.com/groups/opt_out. > > -- > You received this message because you are subscribed to the Google Groups > "graylog2" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
