How to distinguish between two input data sources?

Elastic Stack Logstash
1

Logstash version : 5.0.1

How to distinguish between two input data sources from different computers or systems, the input is used with tcp and the same port, like this :

input {
tcp {
port => 514
}
}

for example :
I will send the different computers or systems' syslog to the same 514 port, at this time, how can I distinguish the data source ,so i can process the different data easily ???

Thx.

2

The tcp input will add a field with the IP address of the connecting client.

Also, if it's syslog data the payload itself should identify the hostname of the machine.

3

Got it ! Thank you !

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.