Hi,
what kind of input did you create in Graylog and how did you configure it?
I'm also not sure if you really want to have that TCP input in Logstash…
FWIW, if you only want to read files and send their contents to Graylog,
I'd recommend using Filebeat or nxlog which can both be managed via the
Graylog Collector Sidecar.
Cheers,
Jochen
On Tuesday, 25 October 2016 14:48:56 UTC+2, Benbrahim Anass wrote:
>
> yea i already saw that,
> here is my conf
> input {
> tcp {
> type => "tcp"
> port => "12201"
> }
> file {
> path => "/var/log/messages"
> type => "rsyslog"
> start_position => "beginning"
> }
> }
>
>
> output {
> gelf {
> host => "10.56.130.70"
> port => 12201
> }
> }
>
>
> but i dont see any connection on the port 12201 on the graylog server.
> the port is open, it's not that, nor the firewall
>
> any suggestions?
> thanks
>
> Le mardi 25 octobre 2016 14:31:00 UTC+2, Jochen Schalanda a écrit :
>>
>> Hi,
>>
>> On Tuesday, 25 October 2016 13:19:51 UTC+2, Benbrahim Anass wrote:
>>>
>>> i'm wondering if is it possible to send logs via logstash/gelf to
>>> Graylog2, if it is, i'm gonna need an exemple of a logstash output via GELF
>>>
>>
>> Of course that's possible.
>>
>> See
>> https://www.elastic.co/guide/en/logstash/2.4/plugins-outputs-gelf.html
>> for the relevant documentation.
>>
>> Cheers,
>> Jochen
>>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/8f405f37-c667-46ca-a48f-e829a3065f13%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
