Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Remote logging with Graylog

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 2 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      taenzerme
      last edited by

      Has anyone here been using Graylog with pfSense?

      I have set up the remote server and messages are coming in - but from what I see the syntax is not compatible and the hostname is missing. That makes distinguishing the different pfSense's we're running almost impossible. Graylog takes the filterlog, security etc. parts from messages for the hostname.

      Is there a way to customize the syslog remote syntax or are there any other recommendations to use pfSense remote logging with Graylog (which btw is an awesome piece of software IMHO).

      Thanks,
      Seb

      1 Reply Last reply Reply Quote 0
      • N
        notaduck
        last edited by

        This is mabey too late, but I recently tried to let PfSense send syslog to Graylog2 and yes the syntax is not right!
        I don't know if you added the right extractors for Pfsense. I have made a copy of all of my extractors http://hastebin.com/oqahihewim.pl
        it iwll make the logs from Pfsense easier but not complete! plz let me know if you have found a better solution ;)

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.