How to push jira logs to syslog-ng

[Ville Niiranen]

Hello!

I have been meaning to push Jira logs to a graylog server for Qradar to collect it and parse as needed. Has anyone been able to configure the log4j.properties file correctly ? I have been having some issues

[Earl McCutcheon]

Hello Ville,

Details on configuring the log location in the log4j file is covered in this KB:

• https://confluence.atlassian.com/adminjiraserver/logging-and-profiling-938847671.html

What errors are you running into? Also, noting that the "Support Tool - Log analyser" tool in Jira does not detect this change and will try to scan ${HOME}/log/atlassian-jira.log only.

An alternative to this is to leave the log4j config alone and use a symbolic link for the logs directory to the desired location, to do this:

Linux:

ln -s /path/to/file /path/to/symlink

Windows:

mklink /J C:\path\to\symlink E:\path\to\file

But Please note that Jira's performance will come in to play if there's any considerable delay on reading or writing files from another drive.  As an example, if the logs are moved to a network drive, and network communication is interrupted there will be no logging on the errors generated and can make it difficult to track down issues.

Regards,
Earl