Setting up Graylog to receive logs

This documentation is part of the Forward logs to Graylog guide. View the full guide here: Learn how to configure your Stackhero instances to forward system logs to Graylog for centralized log management..

Follow these steps to configure Graylog for receiving logs:

1. Log in to your Graylog web interface.
2. Navigate to System > Inputs.
3. From the Select input dropdown, choose GELF HTTP.
4. Enable the Global option.
5. Assign a descriptive name to the input, such as "GELF HTTPS".
6. Save the configuration settings.

Graylog GELF HTTP Input Configuration

Next, verify the input port settings in your Stackhero dashboard:

1. Access your Stackhero dashboard.
2. Navigate to the configuration page for your Graylog service.
3. Select Configure.
4. Confirm that port 12201 is enabled for both TCP and TLS under the Input Ports section. Adjust settings if needed.

Activating TLS on Port 12201 in Graylog

Your Graylog instance is now ready to receive logs from Stackhero.