Where is the file to edit the tcp_keepalive

Graylog Central (peer support)
1

I would like to know the name of the file and where it is located to edit the tcp_keepalive ?

allow_override_date: true
bind_address: 0.0.0.0
expand_structured_data: false
force_rdns: false
max_message_size: 2097152
override_source:
porta: 9514
recv_buffer_size: 1048576
store_full_message: false
tcp_keepalive: true
tls/cert_file: /var/lib/graylog-server server.pem
tls_client_auth: desabilitado
tls_client_auth_cert_file:
tls_enable: true
tls_key_file: /var/lib/graylog-server/tls/server.p8
tls_key_password: ********
use_null_delimiter: false

2

I would like to edit it as true yes. due to login error.
But I couldn’t find the file.
I already got Graylog installed.

3

Hello && Welcome

That is part of the input used.

I found another post that may help

4

I didn’t find it in any post.
What is the file name and path to edit tcp_keepalive as true?

5

That configuration is in the INPUT/TCP that is being used, it will keep that TCP socket open.
Its not a file.

6

If your referring to the Operating system then maybe this might help.

EDIT:
@felipaon
I was curious about how Graylog creates inputs, I did find a file and not sure it will help but here is my findings.

On CentOS 7 , Graylog version 4.2. Navigate to /usr/share/graylog-server and its in the .jar file.

image
image825Ă—359 10.9 KB

Using vim,

image
image1019Ă—864 36.8 KB

7

Thank you all for your help.
I still haven’t been able to configure the “tcp_keepalive as true”.

Does anyone have a tutorial with the step by step of this configuration of “tcp_keepalive as true”?

8

Hello @felipaon

If your referring to the INPUT that would be the tic box located here with the red box. A reminder this is for TCP INPUTS.

image
image527Ă—671 21.4 KB

1 Like
9

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.