Details

    • Type: Bug/Feature
    • Status: Confirmed (View workflow)
    • Resolution: Unresolved
    • Affects Version/s: 1.3.3
    • Fix Version/s: None
    • Labels:

      Description

      Hello,

      When I enable TCP input and send syslog messages to logstash the host field which on the UDP input is just IP becomes IP:SPORT.

      In the output folder I see;

      drwxr-xr-x 2 root logstash 4096 Jan 30 21:35 82.71.1.2:43918
      drwxr-xr-x 2 root logstash 4096 Jan 30 21:34 82.71.1.3:59971
      drwxr-xr-x 2 root logstash 4096 Jan 30 21:34 82.71.1.4:59863

      Where as normally it is just IP.

      Config

      # File managed by puppet
      input {
      # File managed by puppet
        udp {
        	port => 514
          type => "syslog"
        }
       # File managed by puppet
        tcp {
        	port => 514
          type => "syslog"
        }
       # File managed by puppet
      }
      # File managed by puppet
      
      output {
      
      # File managed by puppet
      
        file {
              type => "syslog"
      		message_format  => "%{message}"
      		path => "/opt/syslog/%{host}/all.log"
        }
      }
      
      

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                logstash-dev Logstash Developers (Inactive)
                Reporter:
                eperdeme Nathan Flynn
              • Votes:
                1 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated: