i would like to connect many servers to graylog through tcp ,so i guess i need a new input for each server ,and a different port number for each one ,right ?
Le dimanche 22 janvier 2017 16:39:35 UTC, Jochen Schalanda a écrit : > > Hi, > > On Sunday, 22 January 2017 14:06:40 UTC+1, jony wrote: >> >> i think it is text based but can you confirm that to me ,here's a link of >> the detailed log format : https://kb.cyberoam.com/default.asp?id=1808 >> > > This looks relatively easy to parse with extractors or the message > processing pipeline: > > http://docs.graylog.org/en/2.1/pages/extractors.html > http://docs.graylog.org/en/2.1/pages/pipelines.html > > Take a look at the Key/Value extractor or the Grok extractor. > > >> For the port number ;let's say i have 30 inputs all using tcp ,if i >> choose for each one a different port number ,would that be okay ?? >> > > Yes, that's no problem. But what exactly do you want to achieve? You don't > need to start a separate input for each client (using the same protocol). > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/273274dd-af55-4fde-b430-d6c435522a36%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
