Inputs with specific TAG(Type)

[carlos.mangini]

Folks,

I currently separate the logs I receive on specific ports. Each entry represents a customer.
I would like to know if it is possible to put a TAG (Type) in the inputs of each port. This TAG would be unique for each
Port, containing the company name of this client, field that would like to use it for query.


Thank you all.

[cdienger]

That will be okay. The default config even has a couple examples demonstrating this:

Code: Select all

tcp {
    type => 'import_raw'
    tags => 'import_raw'
    port => 2056
}

and

Code: Select all

tcp {
    type => 'import_json'
    tags => 'import_json'
    port => 2057
    codec => json
}

[carlos.mangini]

Excellent!
Thanks for the fast feedback!