Skip to main content

rsyslog-Messages an Graylog-Server schicken

Diese Konfiguration ermöglicht es rsyslog-Nachrichten an einen externen Graylog-Server weiterzuleiten:

/etc/rsyslog.d/graylog.conf
# keep full qualified domain names
$PreserveFQDN on

# graylog-server on log.myserver.de UDP Port 5140
$template GRAYLOGRFC5424,"<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msg%\n"
*.* @log.myserver.de:5140;GRAYLOGRFC5424

# graylog-server on log.myserver.de TCP Port 5140
#$template GRAYLOGRFC5424,"<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msg%\n"
#*.* @@log.myserver.de:5140;GRAYLOGRFC5424
Back to top