24 lines
1.2 KiB
Markdown
24 lines
1.2 KiB
Markdown
|
### Configuring nginx
|
||
|
|
|
||
|
|
You need to run at least nginx version 1.11.8, with `escape=json` support.
|
||
|
|
|
||
|
|
**Add this to your nginx configuration file and restart the service:**
|
||
|
|
|
||
|
|
log_format graylog2_json escape=json '{ "timestamp": "$time_iso8601", '
|
||
|
|
'"remote_addr": "$remote_addr", '
|
||
|
|
'"body_bytes_sent": $body_bytes_sent, '
|
||
|
|
'"request_time": $request_time, '
|
||
|
|
'"response_status": $status, '
|
||
|
|
'"request": "$request", '
|
||
|
|
'"request_method": "$request_method", '
|
||
|
|
'"host": "$host",'
|
||
|
|
'"upstream_cache_status": "$upstream_cache_status",'
|
||
|
|
'"upstream_addr": "$upstream_addr",'
|
||
|
|
'"http_x_forwarded_for": "$http_x_forwarded_for",'
|
||
|
|
'"http_referrer": "$http_referer", '
|
||
|
|
'"http_user_agent": "$http_user_agent" }';
|
||
|
|
|
||
|
|
# replace the hostnames with the IP or hostname of your Graylog2 server
|
||
|
|
access_log syslog:server=graylog.server.org:12304 graylog2_json;
|
||
|
|
error_log syslog:server=graylog.server.org:12305;
|