Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat][Cisco] Allow for TCP syslog input #26118

Closed
BenB196 opened this issue Jun 2, 2021 · 2 comments · Fixed by #26159
Closed

[Filebeat][Cisco] Allow for TCP syslog input #26118

BenB196 opened this issue Jun 2, 2021 · 2 comments · Fixed by #26159

Comments

@BenB196
Copy link

BenB196 commented Jun 2, 2021

Describe the enhancement:
Allow the Filebeat Cisco syslog modules to use TCP

Describe a specific use case for the enhancement or feature:
Currently the Filebeat Cisco syslog modules are hard-coded to using UDP, however most Cisco equipment that can do syslog output, can be configured to use TCP. It would be ideal if you could switch between UDP and TCP input for the Cisco Filebeat syslog modules.

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Jun 2, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Jun 3, 2021
@legoguy1000
Copy link
Contributor

@BenB196 The Nexus and Meraki fileset should allow you to choose var.input: udp currently. I've updated ASA, FTD, IOS filesets in my branch that Im testing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants