I was curious if anyone has tried to pass network traffic on a Cisco switch to graylog server? At the moment it seems damn near impossible. At the moment I am able to pass the IOS system logs to graylog with the “logging host” IOS command. Also I am able to see network traffic by enabling SPAN on th…

Graylog is a log server, not network traffic analyzer. Graylog supports only netflow statistics, it has special input for it. But you can’t pass it complete network stream from SPAN port. Check for packetbeat, and then send to graylog, that way it should work. [image] Packetbeat Reference …

Hi, zsanford I have done this scenario before for Cisco switch traffic. See the post below [image] Packetbeat SPAN port Cisco switch 2960 Graylog Central (peer support) hi guys I transfer a SPAN port Cisco 2960 to a VM machine (windows 2016 ) and i see traffic interfa…

Cisco Network Traffic to Graylog

Graylog Central (peer support)

bahram (bahram) May 24, 2021, 3:19pm 3

Hi, zsanford

I have done this scenario before for Cisco switch traffic.
See the post below

Topic		Replies	Views
Packetbeat SPAN port Cisco switch 2960 Graylog Central (peer support) sidecar	0	982	August 23, 2020
Cisco Log 2 Graylog Graylog Central (peer support)	2	980	January 15, 2018
Adding a cisco switch to Graylog server 2.2 Graylog Central (peer support)	0	1681	April 19, 2019
Log Cisco Messages Graylog Central (peer support)	19	13650	November 29, 2019
Cisco switch logs Graylog Central (peer support)	2	813	June 3, 2019

Cisco Network Traffic to Graylog

Related topics