5182 questions

6320 answers

10137 comments

6255 members

0 votes
498 views 0 comments
by

I have 20 RUT955 devices, I am configuring the event server with graylog, so far I have already linked all the devices but I cannot identify which event belongs to each one.

This is the graylog screen where you receive the events, but it doesn't show the ip / mac to identify the device. How do you identify events when you have many devices? What tools do you use without counting email and text messages?

For example in the hotspot configuration there is the option of a prefix, is it possible to do it to the general log? to know where the notification comes from.

1 Answer

0 votes
by

Hello,

I have no experience with graylog in particular, but from using other servers I can say that the source IP is displayed.

Perhaps there are additional filter settings on graylog that could help you out with that?

About the prefix: I can ask RND to add it to the configuration in the future.