Preserve source IP address

View thread

Olga35000

Hi

I'm trying to do a syslog udp to tcp converter using this method from the user's manual:

<Input in>
    Module im_tcp
    Host 0.0.0.0
    Port 2345
 </Input>

<Output out>
    Module      om_tcp
    Host        mysyslog.domain.local
    Port        514
</Output>

~~<Processor buffer>
 Module pm_buffer
 WarnLimit 800
 MaxSize 1000
 Type Mem
 Exec if buffer_size() >= 80k drop();
</Processor>

<Route 1>
    Path in => buffer => out
</Route>

This is working correctly but all the events recieved by mysyslog.domain.local server are coming from the same source (the IP of the NXLOG server). Is there a way to preserve the source IP?

Thanks in advance

Regards,

Olga