# Logstash - Syslog input and output

**URL:** <https://discuss.elastic.co/t/logstash-syslog-input-and-output/117647>\
**Category:** Logstash\
**Created:** [January 30, 2018, 3:10pm UTC](https://discuss.elastic.co/t/logstash-syslog-input-and-output/117647 "2018-01-30T15:10:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![drayke\_jackson](https://avatars.discourse-cdn.com/v4/letter/d/53a042/32.png) [@drayke\_jackson](https://discuss.elastic.co/u/drayke_jackson)\
**Post date:** [January 30, 2018, 3:10pm UTC](https://discuss.elastic.co/t/logstash-syslog-input-and-output/117647/1 "2018-01-30T15:10:08Z")

</div>

Hello everyone, I am trying to send multiple sources to logstash, filter them by hostname and/or source ip and output them via syslog. I need the source ip to be retained. Does anyone have experience with this? So far my config looks like this...

input  
{  
syslog

{  
host =\> "0.0.0.0"  
port =\> 514

}

}

output  
{  
syslog

{

host =\> "170.77.102.38"  
port =\> 514

}

}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 27, 2018, 3:14pm UTC](https://discuss.elastic.co/t/logstash-syslog-input-and-output/117647/2 "2018-02-27T15:14:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.