[ 
https://issues.apache.org/jira/browse/NIFI-2889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15567845#comment-15567845
 ] 

Yohann commented on NIFI-2889:
------------------------------

Thanks [~bbende],  I didn't tested the  "syslog.sender"  because the 
documentation indicates only the hostname and not the IP address.

However, after a little test with a ListenSyslog processor and AttributesToJSON 
processor:
{code}
$ logger -P 5000 -n 192.168.1.10 -T  test2
{code}

I got the following result :
{code}
{  
   "syslog.hostame":"",
   "syslog.sender":"/192.168.1.10",
   "syslog.body":"yoyo - - [timeQuality tzKnown=\"1\" isSynced=\"1\" 
syncAccuracy=\"114500\"] test2",
   "syslog.timestamp":"2016-10-12T07:36:30.367139+02:00"
}
{code}

So the "syslog.sender" return the correct IP of the sender with the prefix 
{{/}}. 

* What is the expected format of syslog.sender ? Is it {{hostname/ip}} ?  
([ListenSyslog.java#L524|https://github.com/apache/nifi/blob/d838f61291d2582592754a37314911b701c6891b/nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/ListenSyslog.java#L524])
* Is it possible to disable the hostname resolution ?  (no DNS PTR request)

 

> Add syslog.ip attribut to ListenSyslog processor
> ------------------------------------------------
>
>                 Key: NIFI-2889
>                 URL: https://issues.apache.org/jira/browse/NIFI-2889
>             Project: Apache NiFi
>          Issue Type: Wish
>          Components: Core Framework
>    Affects Versions: 1.0.0
>            Reporter: Yohann
>            Priority: Minor
>
> Currently, it's not possible to get the IP (v4/v6) address of the syslog 
> server that sent the message.
> So, I would like a {{syslog.ip}} attribut with the IP address of the syslog 
> server. 
> Use case:  
> - Useful for monitoring (with different policy monitoring depending of the IP)
> - The hostname is not always present in the syslog message, so the IP could 
> be used to identify the syslog server that sent the message 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to