i would like to connect many servers to graylog through tcp ,so i guess i need a new input for each server ,and a different port number for each one ,right ?
Le dimanche 22 janvier 2017 16:39:35 UTC, Jochen Schalanda a écrit : > > Hi, > > On Sunday, 22 January 2017 14:06:40 UTC+1, jony wrote: >> >> i think it is text based but can you confirm that to me ,here's a link of >> the detailed log format : https://kb.cyberoam.com/default.asp?id=1808 >> > > This looks relatively easy to parse with extractors or the message > processing pipeline: > > http://docs.graylog.org/en/2.1/pages/extractors.html > http://docs.graylog.org/en/2.1/pages/pipelines.html > > Take a look at the Key/Value extractor or the Grok extractor. > > >> For the port number ;let's say i have 30 inputs all using tcp ,if i >> choose for each one a different port number ,would that be okay ?? >> > > Yes, that's no problem. But what exactly do you want to achieve? You don't > need to start a separate input for each client (using the same protocol). > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/273274dd-af55-4fde-b430-d6c435522a36%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
