Real simple one this I'm sure.
I want to monitor syslog of my router.
I have gone to Manager->Data inputs->TCP
Did port 514, host=IP, source type: Manual, syslog, Index: deafault
This is literally all I have done.
If I load up a simple syslog monitor tool then this gets logs from the server.
I can't seem to view these logs anywhere though, it does show me any sources if I use the search app.
Where have I gone wrong?
Fixed, needs to be UDP!
it CAN be TCP as well. You just need to make sure that you are sending the data as TCP though.