Details
-
Type:
Bug/Feature
-
Status: Confirmed (View workflow)
-
Resolution: Unresolved
-
Affects Version/s: 1.3.3
-
Fix Version/s: None
-
Labels:
Description
Hello,
When I enable TCP input and send syslog messages to logstash the host field which on the UDP input is just IP becomes IP:SPORT.
In the output folder I see;
drwxr-xr-x 2 root logstash 4096 Jan 30 21:35 82.71.1.2:43918
drwxr-xr-x 2 root logstash 4096 Jan 30 21:34 82.71.1.3:59971
drwxr-xr-x 2 root logstash 4096 Jan 30 21:34 82.71.1.4:59863
Where as normally it is just IP.
Config
# File managed by puppet
input {
# File managed by puppet
udp {
port => 514
type => "syslog"
}
# File managed by puppet
tcp {
port => 514
type => "syslog"
}
# File managed by puppet
}
# File managed by puppet
output {
# File managed by puppet
file {
type => "syslog"
message_format => "%{message}"
path => "/opt/syslog/%{host}/all.log"
}
}