[graylog2] Re: How to parse OpenVPN logs in Graylog?

[Benbrahim Anass]

Hi

i use GROK to parse everything, try this :

%{WORD:program}%{NOTSPACE}: %{IPV4:IPClient}:%{NOTSPACE:PORT} 
\[%{WORD:User}\]


i track daily connections as follow,




feel free to contact me on linkedIn 
 for more 
Cheers,

Anas

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/99b29466-48e7-486b-ba81-5a881fe25497%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: How to parse OpenVPN logs in Graylog?

[Jochen Schalanda]

Hi César,

first you have to ship the logs to your Graylog server, either by 
forwarding the messages via your syslog daemon on that system or by reading 
from a log file on that system.

See http://docs.graylog.org/en/2.2/pages/sending_data.html 
and http://docs.graylog.org/en/2.2/pages/collector_sidecar.html for details.

Then you need to extract the interesting information from the plaintext 
logs using extractors or message pipeline rules.

See http://docs.graylog.org/en/2.2/pages/extractors.html 
and http://docs.graylog.org/en/2.2/pages/pipelines.html for details.

Cheers,
Jochen

On Thursday, 9 February 2017 12:18:32 UTC+1, CESAR Fabre wrote:
>
> Hi guys,
>
> I have the PfSense 2.3.2 with OpenVPN enabled. I want to parse OpenVPN 
> logs in Graylog with Dashboards.
>
> I have no idea. Can you help me?
>
>
> Thanks a lot!
>
>
> César
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/7e4152a7-2286-4798-b7fc-da3ac92851fb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.