DNS translation in syslog

[CaseBlue (Dieter Lievens)]

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
DNS reverse lookup for syslog input, what is the correct way of doing this? I’m new to graylog.

2. Describe your environment:

• OS Information:
  Ubuntu 22.04

• Package Version:

• Service logs, configurations, and environment variables:
  Graylog version is 6.0.0 (Noir) released at 2024-05-07T00:00:00.000Z

3. What steps have you already taken to try and solve the problem?
Read many confusing articles and posts, some describing I need to edit mongoDB input, some mention something called “a pipeline”. No idea what any of that is.

4. How can the community help?
Can someone point me in the right direction where to look? I don’t mind fiddling with a bit of code, but I’m completely blind.

All I want is to translate IP addresses through DNS to a hostname:

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

[der_dings (Karsten Schwarz)]

Hi, i don’t know if i do it the right way. But this is how i do it.
1st you need a reverse dns lookup table. If i remember right, there was a Graylog Blogpost about it.
2nd my pipeline rule looks like this:

Hope it helps…