<Output out>

Module om_tcp

Host 192.168.1.1

Port 514

Exec to_syslog_snare();

Can someone please tell me what's the purpose of the HOST IP, by default it's set to 192.168.1.1. What exactly should it be?

Thanks

Permalink

#2 farrisk01 2 years ago (Last updated 2 years ago )

#1 Drew.Ferguson

Converting events to Snare format and sending them out over TCP syslog <Output out> Module om_tcp Host 192.168.1.1 Port 514 Exec to_syslog_snare(); Can someone please tell me what's the purpose of the HOST IP, by default it's set to 192.168.1.1. What exactly should it be? Thanks

Host is the IP that will receive the logs(i.e. log collector). You may need to change it.

NXLog.conf files issues

<Output out>

Module om_tcp

Host 192.168.1.1

Port 514

Exec to_syslog_snare();