Retrieve source IP of a HAProxy message received via Syslog UDP input

Graylog Central (peer support)
1

Hello,

I’m trying to send HAProxy logs to Graylog.
To do so, I created a Syslog UDP input and added this line to the “haproxy.cfg” configuration file (In the “global” section): “log ipofmylogserver:514 local0”.
I receive the logs in Graylog but in the messages the source is “haproxy[xxxxxx]” and not the source IP of HAProxy as you can see in the screenshot below.

SYSLOG_UDP_514_WITHOUT_rDNS
SYSLOG_UDP_514_WITHOUT_rDNS1814×403 25.1 KB

I’ve enabled “rDNS” in the Syslog UDP input and I’m getting the source server name, but what I’m interested in is the IP.
I tried to create a “RAW UDP” input, but the messages received no longer contain the “level” field.

Do you know how to retrieve the IP of the source HAProxy server from the Syslog UDP input (I don’t want to reverse DNS)?

Thank you

  • OS Information: Debian 12
  • Package Version: Graylog 6.0.6
2

Hi,

In HAProxy you can set the hostname with this setup :

log-send-hostname “MYSERVER”

Have a nice day

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.