[
https://issues.apache.org/jira/browse/NIFI-2889?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15567845#comment-15567845
]
Yohann commented on NIFI-2889:
------------------------------
Thanks [~bbende], I didn't tested the "syslog.sender" because the
documentation indicates only the hostname and not the IP address.
However, after a little test with a ListenSyslog processor and AttributesToJSON
processor:
{code}
$ logger -P 5000 -n 192.168.1.10 -T test2
{code}
I got the following result :
{code}
{
"syslog.hostame":"",
"syslog.sender":"/192.168.1.10",
"syslog.body":"yoyo - - [timeQuality tzKnown=\"1\" isSynced=\"1\"
syncAccuracy=\"114500\"] test2",
"syslog.timestamp":"2016-10-12T07:36:30.367139+02:00"
}
{code}
So the "syslog.sender" return the correct IP of the sender with the prefix
{{/}}.
* What is the expected format of syslog.sender ? Is it {{hostname/ip}} ?
([ListenSyslog.java#L524|https://github.com/apache/nifi/blob/d838f61291d2582592754a37314911b701c6891b/nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/ListenSyslog.java#L524])
* Is it possible to disable the hostname resolution ? (no DNS PTR request)
> Add syslog.ip attribut to ListenSyslog processor
> ------------------------------------------------
>
> Key: NIFI-2889
> URL: https://issues.apache.org/jira/browse/NIFI-2889
> Project: Apache NiFi
> Issue Type: Wish
> Components: Core Framework
> Affects Versions: 1.0.0
> Reporter: Yohann
> Priority: Minor
>
> Currently, it's not possible to get the IP (v4/v6) address of the syslog
> server that sent the message.
> So, I would like a {{syslog.ip}} attribut with the IP address of the syslog
> server.
> Use case:
> - Useful for monitoring (with different policy monitoring depending of the IP)
> - The hostname is not always present in the syslog message, so the IP could
> be used to identify the syslog server that sent the message
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
