Hi Eric, there's a setting named "Store full message?" in the Syslog input which allows storing the original message in the full_message field. You could try and see if that helps you forwarding the original message.
Cheers, Jochen On Tuesday, 24 May 2016 20:52:53 UTC+2, Eric Curley wrote: > > All, > > I am having an issue sending logs to a another syslog server via Grey > log. It comes up with the original host name of the log but the Source and > Detestation IP info comes up as the Grey Log server instead of the original > Log Source. After further inspection, it appears that the log has been > modified. How do I get the original payload forwarded from Grey Log? Is > there a special config I am missing in the forwarding configuration on the > Grey Log server? > > Thanks > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/92c4c501-7f3a-4fb3-b400-34a62ec8fdc4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
