Sources as ip addresses


(Hoygen) #1

Hello,
in graylog is it possible to have all the sources identified with the ip address as theyr name?
Right now I have a huge mess in all the sources.
For example:
oct
etcd
nginx
graylog-server
hostname1
hostname2
ip-address3
ip-address4

I would like to have all the sources identified like this:
ip-address1
ip-address2
ip-address3
ip-address4
ip-address5
ip-address6
ip-address7
ip-address8

Kindest Regards.


(Hoygen) #2

soultion for the oct source (as october) is here: Syslog input without source ip
I will need to fix etcd nginx and the hostnames in a similar way since they came from GELF-UDP input


(Jan Doberstein) #3

depending how you ingest the messages this is written by the sending client. So configure that client that it includes the IP and you will have that fixed.