Preserve source IP address | View post | Log collection solutions

Olga35000 6 years ago

I'm trying to do a syslog udp to tcp converter using this method from the user's manual:

<Input in>
    Module im_tcp
    Host 0.0.0.0
    Port 2345
</Input>

<Output out>
    Module      om_tcp
    Host        mysyslog.domain.local
    Port        514
</Output>

~~<Processor buffer>
Module pm_buffer
WarnLimit 800
MaxSize 1000
Type Mem
Exec if buffer_size() >= 80k drop();
</Processor>

<Route 1>
Path in => buffer => out
</Route>

This is working correctly but all the events recieved by mysyslog.domain.local server are coming from the same source (the IP of the NXLOG server). Is there a way to preserve the source IP?

Thanks in advance

Regards,

Olga