1-i would like to connect many servers to my gray server through tcp ,is there a way to do that without implementing a new input for each client ? 2-So i guess to connect my firewall, i should create the input type raw text, and that would enable the runing of the input ? because with other types my input fails
Le dimanche 22 janvier 2017 16:39:35 UTC, Jochen Schalanda a écrit : > > Hi, > > On Sunday, 22 January 2017 14:06:40 UTC+1, jony wrote: >> >> i think it is text based but can you confirm that to me ,here's a link of >> the detailed log format : https://kb.cyberoam.com/default.asp?id=1808 >> > > This looks relatively easy to parse with extractors or the message > processing pipeline: > > http://docs.graylog.org/en/2.1/pages/extractors.html > http://docs.graylog.org/en/2.1/pages/pipelines.html > > Take a look at the Key/Value extractor or the Grok extractor. > > >> For the port number ;let's say i have 30 inputs all using tcp ,if i >> choose for each one a different port number ,would that be okay ?? >> > > Yes, that's no problem. But what exactly do you want to achieve? You don't > need to start a separate input for each client (using the same protocol). > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/a1101faa-dfeb-492a-89f4-d8e53b77fc3b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
