Where is the file to edit the tcp_keepalive

I would like to know the name of the file and where it is located to edit the tcp_keepalive ?

allow_override_date: true
expand_structured_data: false
force_rdns: false
max_message_size: 2097152
porta: 9514
recv_buffer_size: 1048576
store_full_message: false
tcp_keepalive: true
tls/cert_file: /var/lib/graylog-server server.pem
tls_client_auth: desabilitado
tls_enable: true
tls_key_file: /var/lib/graylog-server/tls/server.p8
tls_key_password: ********
use_null_delimiter: false

I would like to edit it as true yes. due to login error.
But I couldn’t find the file.
I already got Graylog installed.

Hello && Welcome

That is part of the input used.

I found another post that may help

I didn’t find it in any post.
What is the file name and path to edit tcp_keepalive as true?

That configuration is in the INPUT/TCP that is being used, it will keep that TCP socket open.
Its not a file.

If your referring to the Operating system then maybe this might help.

I was curious about how Graylog creates inputs, I did find a file and not sure it will help but here is my findings.

On CentOS 7 , Graylog version 4.2. Navigate to /usr/share/graylog-server and its in the .jar file.

Using vim,

Thank you all for your help.
I still haven’t been able to configure the “tcp_keepalive as true”.

Does anyone have a tutorial with the step by step of this configuration of “tcp_keepalive as true”?

Hello @felipaon

If your referring to the INPUT that would be the tic box located here with the red box. A reminder this is for TCP INPUTS.

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.