Graylog monitoring VSFTP

[rodrigobuch]

Hi All,

I agreed to configure the graylog to monitor my vsftp server.

It is working perfectly, but I doubt if I can configure Graylog as follows for my FTP clients.

I need to create some accesses on Garylog for my clients to see only their ftp users’ log lines.

I saw that I can make filters and display only one specific user.

But I don’t know if it is possible to create an access for a client and leave this search fixed so that he does not see the logs of other clients.

Follow my log /var/log/vsftp.log

[shoothub]

You can create stream for every client and allow client to access to specific stream.
https://docs.graylog.org/en/4.0/pages/streams.html

[rodrigobuch]

Thank you, shoothub
I will study the documentation.

[rodrigobuch]

Hi, shoothub

I did the index set configuration and then added the stream but it doesn’t display anything.

What do we need to do?

Thank you

[rodrigobuch]

Hi,

I managed to create the role in the streams with regex.Pattern

Thank you anyway!