Hi Steve, the easiest way to ingest old log files is sending them via netcat, nxlog, or logstash to Graylog. In case of netcat, you'll probably need a Raw/Plaintext input and a set of extractors in Graylog. In case of nxlog or logstash you could pre-process the logs (e. g. parse them and create a structured format) on the system itself and then send them to a GELF input in Graylog without the need for separate extractors.
Cheers, Jochen On Wednesday, 30 September 2015 10:43:05 UTC+2, Steve Kirkpatrick wrote: > > I have been testing out Graylog 1.2.1 using the VM appliance. I have > pointed one of my syslog-ng servers at Graylog and all is working as > expected. > > Next, I would like to load some of my archived syslog files into Graylog > so I can search on older data. Is this possible? If so, what is the > best/easiest way to do this? > I have seen some references to using "nc" but not sure of the details on > how to do so. > > Any pointers are appreciated. > > Thanks, > Steve. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1a7e9f54-9ade-42d7-b683-4edb6545a522%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
