N.B. The following configuration *does* work:
server-url = "http://xxx.xxx.xxx.xxx:12900/";
collector-id = /etc/graylog/collector/collector-id
inputs {
syslog {
type = "file"
path = "/var/log/syslog"
}
apache-logs {
type = "file"
path = /var/log/apache2/access.log
}
}
outputs {
graylog-server {
type = "gelf"
host = "xxx.xxx.xxx.xxx"
port = 12201
}
}
On Tuesday, 8 December 2015 12:29:11 UTC, Sean McGurk wrote:
>
> Hi all,
>
> I have configured a graylog collector with the following settings:
>
> server-url = "http://xxx.xxx.xxx.xxx:12900/";
>
> collector-id = /etc/graylog/collector/collector-id
>
> inputs {
>
> syslog {
>
> type = "file"
>
> path = "/var/log/syslog"
>
> }
>
> apache-logs {
>
> type = "file"
>
> // /var/log/apache2/**/*.{access,error}.log
>
> path-glob-root = "/var/log/apache2"
>
> path-glob-pattern = "**/*.{access,error}.log"
>
> }
>
> }
>
> outputs {
>
> graylog-server {
>
> type = "gelf"
>
> host = "xxx.xxx.xxx.xxx"
>
> port = 12201
>
> }
>
> }
>
>
>
> And have created an input on the server have configured a graylog collector
> with the following settings:
>
>
> - recv_buffer_size: 1048576
> - port: 12201
> - tls_key_file: graylog-user
> - tls_key_password: *******
> - use_null_delimiter: true
> - tls_client_auth_cert_file:
> - max_message_size: 2097152
> - tls_client_auth: disabled
> - override_source:
> - bind_address: xxx.xxx.xxx.xxx
> - tls_cert_file:
>
> And while I am able to see syslog messages sent in by the collector, I am
> unable to see apache log messages.
>
> Does anyone know where I am going wrong?
>
> Thanks,
>
> Seán
>
>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/bbebc847-e432-4375-b240-996defc1ba5d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
