Cisco Network Traffic to Graylog

Graylog Central (peer support)
1

I was curious if anyone has tried to pass network traffic on a Cisco switch to graylog server? At the moment it seems damn near impossible. At the moment I am able to pass the IOS system logs to graylog with the “logging host” IOS command. Also I am able to see network traffic by enabling SPAN on the switch and monitoring with Wireshark on another port.

I was just curious if I could pass that Wireshark-looking live traffic to graylog?

2

Graylog is a log server, not network traffic analyzer. Graylog supports only netflow statistics, it has special input for it. But you can’t pass it complete network stream from SPAN port. Check for packetbeat, and then send to graylog, that way it should work.

2 Likes
3

Hi, zsanford

I have done this scenario before for Cisco switch traffic.
See the post below

1 Like
5

This is awesome thank you!

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.