Page 1 of 1

Receive syslog from collector

Posted: Wed Oct 31, 2018 11:24 am
by ssafronov
I've got multiply networks and a server, that collects syslog messages from different hosts (switches, routers, linux and windows machines).
After that, syslog is transferred to syslog anallyser (other vendor).
When i tried to add nagios LS to receivers, i started collect messages too, but i see a collectors IP address as a source (not a real switch or linux machine).
How can i translate source IP via rsyslogd to nagios?
Thank you!

Re: Receive syslog from collector

Posted: Wed Oct 31, 2018 4:56 pm
by cdienger
Does the forwarder include the original IP address? If so, it can be parsed out with additional filters. We would need sample logs to create a filter, but I would strongly encourage anyone to try setting up the filters themselves after reviewing https://support.nagios.com/kb/article/n ... ew-98.html. The "Logstash Example Configuration" section specifically steps through setting up custom filters.