# Add to /etc/rsyslog.d these files:

elasticsearch.conf
graylog.conf

systemctl restart rsyslog