Your first steps

This page sets up Sage to ship an nginx access log to an HTTP endpoint. It assumes Sage is installed.

#Write a configuration

Save this as /etc/sage/sage.toml:

# /etc/sage/sage.toml

[inputs]
files = ["/var/log/nginx/*.log", "/var/log/app/*.log"]
journald = true

[parse]
format = "json"

[outputs.http]
url = "https://logs.example.com/ingest"

[buffer]
max_size = "1GiB"

#Check it

$ sage validate
configuration ok: 2 inputs, 1 output

#Watch the events

$ sage tail nginx --lines 1
{"time":"2026-11-12T10:02:11Z","status":200,"path":"/","took_ms":3}

#Start shipping

$ sudo systemctl enable --now sage

#Next steps

• Learn how to parse your own log formats.
• Add labels so you can tell your servers apart.