_SYSLOG_SOURCE_ADDR usage

[Soul]

Hi All,

Can someone please let me know how to use '_SYSLOG_SOURCE_ADDR' this function in a map file, so that I can use it to get the address of the device sending logs to my connector. I need to map that value with deviceAddress.

Thanks in Advance !!!

Regards,

Soul

[devasismahato]

Hi Soul,

Is the deviceHostname being captured in the logs.

[shezaf1]

Did you try this?

[Soul]

Hi Ofer Shezaf,

Thanks for the reply, I have checked the link you provided.

But I'm not sure how to put the parser override in a Syslog connector, I have multiple devices reporting through this particular syslog connector. And I'm not using any parser to parse the logs.

Thanks,

Soul