Re: [mod-security-users] Reading Concurrent Logs into Graylog

[Jose P. V. L. <pab...@gm...>]

Hi. Have you checked if directory where nxlog send files has x permission?
Under what user is running nxlog and graylog? In some applications you can
map users from one server to another like I think nfs service does.

Kind regards

El mié., 19 de octubre de 2016 21:25, Jason Mull <jm...@te...>
escribió:

> Hello, I’m hoping someone can assist me with this issue.  I’m using
> Graylog to take in all of my log data, including Modsecurity.  I was
> initially using nxlog to send serial logs in JSON format to Graylog and
> everything worked great until I started running into performance issues
> running modsecurity on a server running multiple websites and was informed
> that concurrent logging was better for my needs.  I switched to concurrent
> logging, and the data is not reading into Graylog now.  I feel confident
> that I do not have a permissions issue as I do not see permission denied
> errors in the nxlog error logs.  Furthermore, if I copy a line of JSON logs
> from the serial log on another server, it reads in just fine.  The issue
> appears to me to be with how the JSON is generated in concurrent mode.  Has
> anyone else run into any issues similar to this?
>
>
>
> Jason
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/
>