Extractor for huawei AR Routers Info-center / Syslog

Extractor for huawei AR Routers Info-center / Syslog

@tverschuren

View on Github
Open Issues
Stargazers

First a note

In huawei info-center you cannot specify a tcp/udp port for sending messages to. As a work-around we create a NAT rule on the Ubuntu server where graylog is.

This only works if no other devices send syslog to UDP/514.

iptables -t nat -A PREROUTING -i eth0 -p udp --dport 514 -j REDIRECT --to-port 11002

(You can run graylog as root to let it listen directly on port 514, then you would not need this NAT rule, but that’s not recommended)