# Fluent bit to graylog

**URL:** <https://community.graylog.org/t/fluent-bit-to-graylog/30516>\
**Category:** Graylog Central (peer support)\
**Created:** [October 31, 2023, 5:22pm UTC](https://community.graylog.org/t/fluent-bit-to-graylog/30516 "2023-10-31T17:22:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![adiya\_v](https://avatars.discourse-cdn.com/v4/letter/a/2bfe46/32.png) [@adiya\_v](https://community.graylog.org/u/adiya_v)\
**Post date:** [October 31, 2023, 5:22pm UTC](https://community.graylog.org/t/fluent-bit-to-graylog/30516/1 "2023-10-31T17:22:45Z")

</div>

I have installed fluent-bit in my local vm  
and done configuration as:

[INPUT]  
Mode udp  
Listen 0.0.0.0  
Port 5140  
Name syslog  
Buffer\_Chunk\_Size 32000  
Buffer\_Max\_Size 64000

[OUTPUT]  
name udp  
Host 192.168.15.8  
Port 5518  
Format json\_lines  
tls off  
tls.verify Off  
tls.ca\_file /etc/graylog/server/  
tls.crt\_file /path/to/client\_certificate  
tls.key\_file /path/to/client\_certificate\_key

I have installed fake sonicwall logs in my windows and given udp with 5140 port and vm ip.

Created graylog input raw/plaintext udp with 5518 port

These are my sonic fake loger  
Oct 31 14:53:32 172.21.1.2 SSLVPN: id=sslvpn sn=18B1694D3878 time=2023-10-31 14:53:32 vp\_time=2023-10-31 14:53:32 fw=192.168.200.1 pri=5 m=2 c=102 src=82.194.55.86 dst=46.42.102.165 user=“sarahrodriguez” user=“sarahrodriguez” msg=“NetExtender disconnected” duration=243 bytesIn=111879 bytesOut=619359 bytesTotal=731238 packetsIn=569 packetsOut=630 packetsTotal=1199 maxThroughput=144052 avgThroughput=3009 agent=“” Oct 31 14:53:36 172.21.1.2 SSLVPN: id=sslvpn sn=18B1694D3878 time=2023-10-31 14:53:36 vp\_time=2023-10-31 14:53:36 fw=192.168.200.1 pri=5 m=2 c=2 src=84.235.97.175 [dst=system.myhealth.com](http://dst=system.myhealth.com) user=“sclark” user=“sclark” msg=“User logged out” active=1612 duration=1612 agent=“SonicWALL NetExtender for Windows 8.6.268 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1)”

---

<div class="post-metadata">

**Author:** ![adiya\_v](https://avatars.discourse-cdn.com/v4/letter/a/2bfe46/32.png) [@adiya\_v](https://community.graylog.org/u/adiya_v)\
**Post date:** [October 31, 2023, 5:23pm UTC](https://community.graylog.org/t/fluent-bit-to-graylog/30516/2 "2023-10-31T17:23:10Z")

</div>

I am getting logs to fluent but not to graylog

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [November 14, 2023, 5:23pm UTC](https://community.graylog.org/t/fluent-bit-to-graylog/30516/3 "2023-11-14T17:23:22Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.