[mod-security-users] Reading Concurrent Logs into Graylog

[Jason M. <jm...@te...>]

Hello, I'm hoping someone can assist me with this issue.  I'm using Graylog to take in all of my log data, including Modsecurity.  I was initially using nxlog to send serial logs in JSON format to Graylog and everything worked great until I started running into performance issues running modsecurity on a server running multiple websites and was informed that concurrent logging was better for my needs.  I switched to concurrent logging, and the data is not reading into Graylog now.  I feel confident that I do not have a permissions issue as I do not see permission denied errors in the nxlog error logs.  Furthermore, if I copy a line of JSON logs from the serial log on another server, it reads in just fine.  The issue appears to me to be with how the JSON is generated in concurrent mode.  Has anyone else run into any issues similar to this?

Jason