I currently have one input per AP at one site, but I have another site with 60 of the APs and I wasn't looking forward to configuring 60 different inputs and port forwards.
Unfortunately, there is no other identifying information in the syslog line. The first field after the timestamp is the service PID, which varies on every reboot and clashes between APs frequently. On Thursday, September 8, 2016 at 2:48:41 AM UTC-4, Jan Doberstein wrote: > > Hej Michael, > > I can use rsyslog to modify the messages or something, but can we get this > as an option for the Syslog input? > > If you use one Input per Accesspoint you can add the Source by input. If > you are able to identify by something else a pipeline can help you to add > this field. > > /jd > > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0f1b8e2e-76c4-45a8-9c59-733fa6fdecea%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
