Hi,

I'm trying to send nginx error logs using syslog to Graylog.

I imported https://github.com/Graylog2/graylog-contentpack-nginx and created

```

error_log syslog:server=monitoring.acme:12302;

```


in an appropriate location for a running server.


When I use a raw UDP input I can see that messages are incoming:


```

<187>Oct 10 15:32:36 acme-staging nginx: 2016/10/10 15:32:36 [error] 
61112#61112: *16666 recv() failed (104: Connection reset by peer) while 
reading response header from upstream, client: 19.230.129.222, server: 
255.255.255.12, request: "GET /api/health HTTP/1.0", upstream: 
"http://127.0.0.1:8080/api/health";, host: "staging.acme.com"

```


but when I try to use the Syslog input it fails to show up (although I can 
see the total of messages going up)


I'm guessing the syslog parser is very strict and that nginx or my host 
sends some malformed log message. Any way of finding out what he is failing 
at? Any more configuration I have to do on my end?


Cheers,

Oliver


nginx 1.8.x

graylog 2.1.1



-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/319f53ad-2029-45a3-b5bb-efb1e74f5222%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to