Hi John, do you receive any messages at all from the syslog server after changing its configuration?
Also take a look at https://github.com/Graylog2/graylog-guide-syslog-linux/blob/master/README.md for instructions how to configure rsyslog to work with Graylog. Cheers, Jochen On Thursday, 16 June 2016 04:19:41 UTC+2, john tombin wrote: > > i have servers in different time zones which are not set to UTC. I was > using RSYSLOG_TraditionalFileFormat and saw the messages delivered to > graylog but the timestamps were way off. I started using > RSYSLOG_SyslogProtocol23Format since this sends TZ info but now i'm not > seeing the messages in graylog at all. From all the documentation I've > read graylog should be able to read this. Are there any recommendations or > has anyone else seen this behavior after switching rsyslog formats messages > stop showing up ? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2847951f-b9ff-4af0-add4-e3259d70c74b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
