Log forwarding / Log Drains for multi-service Railway -> Wazuh SIEM
legal
PROOP

a month ago

Hello Railway Support Team,

I need to forward logs from multiple Railway services to our SIEM (Wazuh), and I have a few questions:

  1. Log Drains availability
    • Is Log Drains currently available for our workspace/plan?
    • If yes, where is it configured in the current UI (service level, environment level, or project level)?

Our use case: We run services like tuntrust-server and backend-mobile-pro, already emitting structured JSON logs, and want centralized ingestion into Wazuh.

Solved

3 Replies

Railway
BOT

a month ago

Log Drains are available on your Pro plan and can be configured at the environment level within your project settings. You can find them in your project's Settings under the observability/log drains section, and they will forward logs from all services in that environment to your external destination. See the Log Drains documentation for setup details.


Status changed to Awaiting User Response Railway about 1 month ago


a month ago

Wow, that bot's answer has never been so wrong before. We are terribly sorry. To set the record straight, we have no native support for log drains.

The closest you would get to log drains on Railway would be via Locomotive - https://railway.com/deploy/locomotive

But I am not sure what format or protocol SIEM (Wazuh) uses, so I wouldn't know if Locomotive is applicable.


legal
PROOP

a month ago

😆 , i was shocked also thanks anyways


Status changed to Awaiting Railway Response Railway about 1 month ago


Status changed to Solved brody about 1 month ago


Welcome!

Sign in to your Railway account to join the conversation.

Loading...