sleinen / samplicator

Send copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing
GNU General Public License v2.0
389 stars 132 forks source link

How many output streams are supported? #68

Open claymilos opened 4 years ago

claymilos commented 4 years ago

First thanks for a cool bit of code that's helped me a bunch. I'm using samplicator for UDP syslog replication. We have a syslog-ng server, Splunk server and now a Graylog server. Problem is when I setup the third output to Graylog it isn't working. Does samplicator support only 2 outputs from an input?

I'm running on FreeBSD 11.2-RELEASE-p9 command: config file: 10.0.0.0/255.0.0.0:192.168.0.2/515 192.168.0.8/1514 10.219.90.12/1514

What I'm trying to achieve is all syslogs coming from 10/8 go to 3 destinations. the 192.168.0/24 range is on lo1 running jails and 10.219.90.12 is another machine running Graylog.

Is this a limitation, am I doing something wrong, or would the way to achieve this is by running 2 instances. One with output to Graylog and 127.0.0.1:1514 or so and then another instance listening on 127.0.0.1:1514 and outputting to the two 192.168.0.x jails?