Hello,
i think the easiest way is the following,
put this in you apache config:
LogFormat "{ \"version\": \"1.1\", \"host\": \"%V\", \"short_message\":
\"%r\", \"timestamp\": %{%s}t, \"level\": 6, \"_user_agent\":
\"%{User-Agent}i\", \"_source_ip\": \"%a\", \"_duration_usec\": %D,
\"_duration_sec\": %T, \"_request_size_byte\": %O, \"_http_status\": %s,
\"_http_request_path\": \"%U\", \"_http_request\": \"%U%q\",
\"_http_method\": \"%m\", \"_http_referer\": \"%{Referer}i\" }"
graylog2_access
and then in you host config:
CustomLog "|nc -u graylogserver 12201" graylog2_access
as input you must use the GELF-format
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/d721a9a9-a8eb-49fb-bb0b-34111bd27393%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
