Hi,
I suggest changing the output to om_file or using tcpdump/wireshark to
see what gets sent over the network.
The problem is most likely on the receiver (logstash) side.
Regards,
Botond
On Tue, 23 Jul 2013 17:55:35 -0400
Enrique Cadalso wrote:
> Hi,
>
> I want to include the fqdn of the s
Hi,
I want to include the fqdn of the server sending logs in the raw_event. I
am using this configuration
Module im_file
File"/var/log/test.log"
SavePos TRUE
Exec$raw_event=$raw_event+'|server:'+hostname_fqdn()+'|';
Sending the log to logstash in the same host for test
