Dnstap Input Plugin
@sega-yarkin
Plugin 0.0.2
Dnstap logs Graylog input plugin
Download from Github
View on Github
Issues
Stargazers
Required Graylog version: 2.0 and later
The plugin provides an input for the Dnstap protocol in Graylog. It can be used to receive data from logs provided by fstrm_capture (e.g. socat FILE:/var/log/unbound/unbound.dnstap TCP:graylog-server:6000 ) or to communicate with DNS server directly (e.g. socat UNIX-LISTEN:/var/run/unbound/dnstap.sock,user=unbound,unlink-early,fork TCP:graylog-server:6000,nodelay,pf=ip4 ).