using collector for forwarding syslog messages: no facility nor level is shown in graylog server about collector HOT 2 CLOSED

The collector treats the syslog file like any other log file and thus does not know about the facility and level.

If you just want to forward syslog to Graylog, it might be easier to create a syslog input and configure your local syslog server to forward to Graylog.

http://docs.graylog.org/en/1.1/pages/sending_data.html#syslog

When configured like this, Graylog server will receive the full syslog message and can parse the facility and level correctly.

from collector.

ok, first i used syslog input from graylog server, but then i need some other application log files additional to log. i thougt it would be easier to do this with one piece of software and configuration (only collector). you are right, i went back to syslog input for my syslog data and additional collector for other application logfiles.

from collector.