Graylog的日志文件存放在Graylog服务器的日志目录中，默认情况下，这个目录是/var/log/graylog/。
在Graylog的配置文件/etc/graylog/server/server.conf中，可以配置Graylog的日志文件路径。在配置文件中找到以下参数：
# REST API listening URI. This must be reachable by other Graylog servers if you run a cluster.rest_listen_uri = http://127.0.0.1:9000/api/# Web interface URI. This must be reachable by your browser.web_listen_uri = http://127.0.0.1:9000/# REST API transport address. This must be a non-loopback address. If not set, it will be picked up from the request's host header.#rest_transport_uri = http://192.168.1.1:9000/api/# Enable gzip support for REST APIrest_enable_gzip = false# 打开日志文件设置# 日志文件log_file = /var/log/graylog/server.log# 日志级别log_level = info# 日志颜色开启is_color_enabled = true在这里可以修改log_file = /var/log/graylog/server.log的路径来配置Graylog的日志文件路径。修改完配置文件后，需要重启Graylog服务才能生效。
