# Graylog 3.1.3 listen on two network interfaces

**URL:** <https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979>\
**Category:** Graylog Central (peer support)\
**Created:** [November 28, 2019, 8:10am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979 "2019-11-28T08:10:41Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![safti](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@safti](https://community.graylog.org/u/safti)\
**Post date:** [November 28, 2019, 8:10am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979/1 "2019-11-28T08:10:41Z")

</div>

Hii all,

I have two network interfaces eth1 (10.0.2.22) and eth2 (192.168.1.12).

Now i want to reach all the netflow traffic over eth2 and all syslog traffic over eth1. Is this possible?  
How should look the server.conf? So that i can configure the inputs with diffrent ip addresses?

Many thanks  
Greets safti

---

<div class="post-metadata">

**Author:** ![facyber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/facyber/32/5209_2.png) [@facyber](https://community.graylog.org/u/facyber)\
**Post date:** [November 28, 2019, 8:55am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979/2 "2019-11-28T08:55:31Z")

</div>

Hi safti,

If I am not wrong, you should be able to define that while creating an Input. Choose **NetFlow UDP** input and in _Bind address_ field, just put the IP address of the **eth2** interface and that should be it.

![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/3/31c0dd3b978780ba86c4eea358908b5b2bd78f5f.png)

Cheers!

---

<div class="post-metadata">

**Author:** ![safti](https://avatars.discourse-cdn.com/v4/letter/s/e99b99/32.png) [@safti](https://community.graylog.org/u/safti)\
**Post date:** [November 28, 2019, 9:18am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979/3 "2019-11-28T09:18:00Z")

</div>

Hii facyber,

Thank you i will try. And in the server.conf? Which IP i have to put in?

greets

---

<div class="post-metadata">

**Author:** ![facyber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/facyber/32/5209_2.png) [@facyber](https://community.graylog.org/u/facyber)\
**Post date:** [November 28, 2019, 9:34am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979/4 "2019-11-28T09:34:58Z")

</div>

Oh I understand now what you actually want.

Not sure if that is possible, but if it possible for your setup, pass all logs toward one IP and then in Graylog interface, with Inputs (I explained earlier) and Streams, you can then divide NetFlow logs from the others.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![macko003](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/macko003/32/3175_2.png) [@macko003](https://community.graylog.org/u/macko003)\
**Post date:** [November 29, 2019, 11:14am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979/5 "2019-11-29T11:14:17Z")

</div>

two things

- inputs: I suggest use 0.0.0.0, it will listen on all interface. If you need I suggest firewall to limit the access. If you have one server, use IP is ok, but if you will have more, you have to make inputs for every server one-by-one…
- GL web interface. As far as I know it is possible to listen only one IP. But you need it only for the web access. So you have to use that what you will access to the search, etc… If you need all interface put an nginx, haproxy, etc, what can bind on all interface, and redirect the traffic. It is also recommended if you would like to use regular ports, eg 80,443 for web access.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [December 13, 2019, 11:14am UTC](https://community.graylog.org/t/graylog-3-1-3-listen-on-two-network-interfaces/12979/6 "2019-12-13T11:14:18Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
