Hi This is a beginner question.
R1 <http://docs.graylog.org/en/1.2/pages/sending_data.html#syslog> instruction is assuming graylog2-sever use authbind like mechanism to bind to port 514 and has syslog content pack installed. Without stopping my local syslog-ng server, I am hoping to send incoming message to graylog2 server beside store it locally. [root@syslog1 conf.d]# cat storelocal.conf # from syslog clients source s_logclients { udp(ip(0.0.0.0) port(514)); tcp(ip(0.0.0.0) port(514)); }; # store it locally with time stamp as file names. destination d_loglocal { file( "/var/log/remote/$HOST.${YEAR}_${MONTH}_${DAY}.log" perm(644) create_dirs(yes) ); }; log { source(s_logclients); destination(d_loglocal); }; [root@syslog1 conf.d]# R1: http://docs.graylog.org/en/1.2/pages/sending_data.html#syslog -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/27665fe4-ea10-4e30-acf4-b19868b1c3bd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
