Dnstap Input Plugin

Dnstap Input Plugin


Plugin 0.0.2

Dnstap logs Graylog input plugin

Download from Github
View on Github

Required Graylog version: 2.0 and later

The plugin provides an input for the Dnstap protocol in Graylog. It can be used to receive data from logs provided by fstrm_capture (e.g. socat FILE:/var/log/unbound/unbound.dnstap TCP:graylog-server:6000 ) or to communicate with DNS server directly (e.g. socat UNIX-LISTEN:/var/run/unbound/dnstap.sock,user=unbound,unlink-early,fork TCP:graylog-server:6000,nodelay,pf=ip4 ).