PiHole with Graylog

[dscryber (David Sciuto)]

PiHole

@Chateau-Lav

Download from Github
View on Github
Open Issues
Stargazers

Built and based off of der eigene dns resolver (zuhause), your own dns resolver (at home) by Jan Doberstein. Includes setting GeoIP, so ensure you download the current City db from Maxmind, and install the current Threat intelligence content packs. A seperate input is established to collect only pihole syslog traffic.

Syslog requirements

syslog-ng Best option, simple and only sends pihole data

#apt install syslog-ng -y
#vi /etc/syslog-ng/conf.d/10-pihole.conf
source s_pihole_log { file("/var/log/pihole.log"); };
destination d_graylog {udp("server.ip" port(1515)); };
log { source(s_pihole_log); destination(d_graylog); };

[Hardness5657]

Hi,

I am running Graylog 4.3 and this content pack fails to import.

Would anyone be willing to help with this and convert this content pack so it can be imported in version 4.x ?

Regards

[gsmith]

Hey @Hardness5657

Best bet would be to ask the person on GitHub.

[Countsian]

@dscryber

source s_pihole_log { file("/var/log/pihole.log"); };
destination d_graylog {udp("server.ip" port(1515)); };
log { source(s_pihole_log); destination(d_graylog); };

thanks just installed this onto Pihole latest version 2024 and Graylog latest 5.2.6 small business and worked a treat…