Hello All,
I'm new to graylog so bare with me if I'm asking a stupid question, but the
little bit a research I've done on this subject hasn't been as fruitful as
I've hoped. I have a syslog server with years of archived logs where the
logs are arranged under a directory structure like
I did something similar as a proof of concept but it was far from elegant.
In short:
1. Use nxlog to listen to a file and configure a rule that uses the date of the
log message and not the current date (which it would do if we don't create this
rule)
2. Use something that reads your log
