# Dnstap Input Plugin

**URL:** <https://community.graylog.org/t/dnstap-input-plugin/22770>\
**Category:** Plug-Ins\
**Tags:** plug-in\
**Created:** [February 23, 2022, 9:28pm UTC](https://community.graylog.org/t/dnstap-input-plugin/22770 "2022-02-23T21:28:38Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dscryber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/dscryber/32/14178_2.png) [@dscryber](https://community.graylog.org/u/dscryber)\
**Post date:** [February 23, 2022, 9:28pm UTC](https://community.graylog.org/t/dnstap-input-plugin/22770/1 "2022-02-23T21:28:38Z")

</div>

# [Dnstap Input Plugin](https://marketplace.graylog.org/addons/9a04a0bd-96cc-4b92-96af-aa400cd51556)

@sega-yarkin

### Plugin 0.0.2

Dnstap logs Graylog input plugin

[Download from Github](https://github.com/sega-yarkin/graylog-plugin-dnstap/releases/tag/v0.0.2)  
[View on Github](https://github.com/sega-yarkin/graylog-plugin-dnstap)  
[Issues](https://github.com/sega-yarkin/graylog-plugin-dnstap/issues)  
[Stargazers](https://github.com/sega-yarkin/graylog-plugin-dnstap/stargazers)

**Required Graylog version:** 2.0 and later

The plugin provides an input for the [Dnstap protocol](http://dnstap.info/) in Graylog. It can be used to receive data from logs provided by [`fstrm_capture`](https://github.com/farsightsec/fstrm) (e.g. `socat FILE:/var/log/unbound/unbound.dnstap TCP:graylog-server:6000` ) or to communicate with DNS server directly (e.g. `socat UNIX-LISTEN:/var/run/unbound/dnstap.sock,user=unbound,unlink-early,fork TCP:graylog-server:6000,nodelay,pf=ip4` ).