https://github.com/dkackman/logstash-syslog-server

A logstash configuration that creates a syslog server
https://github.com/dkackman/logstash-syslog-server

Last synced: over 1 year ago
JSON representation

A logstash configuration that creates a syslog server

• Host: GitHub
• URL: https://github.com/dkackman/logstash-syslog-server
• Owner: dkackman
• License: apache-2.0
• Created: 2019-01-13T15:30:21.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2019-11-24T00:19:46.000Z (over 6 years ago)
• Last Synced: 2025-03-14T20:45:34.818Z (over 1 year ago)
• Language: Shell
• Size: 85.9 KB
• Stars: 1
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# logstash-syslog-server

A logstash pipeline that creates a basic syslog server with custom templates for sudo, ssh, snort, arpwatch, dnsmasq and firewall (ufw and ipfire) events. 

Also includes a pipeline to consume squid proxy and user-agent logs.

You need to [allow java to bind to a priveledged port](https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux) to run this on the standard syslog port of 514