Hello, I'm using filebeat to send syslog input to a kafka server (it works wonderfully, thank you). But I'm wondering: how can I add the IP from the machine that is sending its syslog input in my logs? (I'm aware of processors like add_host_metada but I need the IP from the machine filebeat is re…

Syslog filebeat input, how to get sender IP address?

shaunak (Shaunak Kashyap) January 14, 2020, 7:00pm 4

Yeah, I'm also wondering if you are running into the same issue. The fix for that issue should be released in 7.5.2 and 7.6.0, if you want to wait for a bit to try either of those out.

Shaunak

Topic		Replies	Views
Syslog source ip Logstash	4	3862	October 1, 2020
Can't parse event as syslog rfc3164 Beats filebeat	5	611	March 4, 2024
Can't parse event as syslog rfc3164 Beats filebeat	2	4431	January 31, 2020
Having issues parsing time in CEF Beats fleet , elastic-agent , integrations	18	1153	November 1, 2023
Filebeat CEF Module Beats filebeat	9	2203	December 3, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Syslog filebeat input, how to get sender IP address?

Related topics