Le dimanche 22 janvier 2017 21:50:02 UTC, jony a écrit :
>
> i would like to connect many servers to graylog through tcp ,so i guess i 
> need a new input for each server ,and a different port number for each one 
> ,right ? 
>
> Le dimanche 22 janvier 2017 16:39:35 UTC, Jochen Schalanda a écrit :
>>
>> Hi,
>>
>> On Sunday, 22 January 2017 14:06:40 UTC+1, jony wrote:
>>>
>>> i think it is text based but can you confirm that to me ,here's a link 
>>> of the detailed log format :  
>>> https://kb.cyberoam.com/default.asp?id=1808
>>>
>>
>> This looks relatively easy to parse with extractors or the message 
>> processing pipeline:
>>
>> http://docs.graylog.org/en/2.1/pages/extractors.html
>> http://docs.graylog.org/en/2.1/pages/pipelines.html
>>
>> Take a look at the Key/Value extractor or the Grok extractor.
>>  
>>
>>> For the port number ;let's say i have 30 inputs all using tcp ,if i 
>>> choose for each one a different port number ,would that be okay ?? 
>>>
>>
>> Yes, that's no problem. But what exactly do you want to achieve? You 
>> don't need to start a separate input for each client (using the same 
>> protocol).
>>
>> Cheers,
>> Jochen
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/cc202b56-1721-4d20-9411-f0d16c72574b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to