Eurgh! I *think* this may be because the log files are prefixed by an 'underscore' character (_), so rather than searching for *.log, I should be searching for *log to match the wildcard.
Thanks for your help all, Seán On Tuesday, 8 December 2015 12:29:11 UTC, Sean McGurk wrote: > > Hi all, > > I have configured a graylog collector with the following settings: > > server-url = "http://xxx.xxx.xxx.xxx:12900/"; > > collector-id = /etc/graylog/collector/collector-id > > inputs { > > syslog { > > type = "file" > > path = "/var/log/syslog" > > } > > apache-logs { > > type = "file" > > // /var/log/apache2/**/*.{access,error}.log > > path-glob-root = "/var/log/apache2" > > path-glob-pattern = "**/*.{access,error}.log" > > } > > } > > outputs { > > graylog-server { > > type = "gelf" > > host = "xxx.xxx.xxx.xxx" > > port = 12201 > > } > > } > > > > And have created an input on the server have configured a graylog collector > with the following settings: > > > - recv_buffer_size: 1048576 > - port: 12201 > - tls_key_file: graylog-user > - tls_key_password: ******* > - use_null_delimiter: true > - tls_client_auth_cert_file: > - max_message_size: 2097152 > - tls_client_auth: disabled > - override_source: > - bind_address: xxx.xxx.xxx.xxx > - tls_cert_file: > > And while I am able to see syslog messages sent in by the collector, I am > unable to see apache log messages. > > Does anyone know where I am going wrong? > > Thanks, > > Seán > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/378e91d3-88c2-4b92-a4ae-735c7944f181%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
