Hi
i use GROK to parse everything, try this :
%{WORD:program}%{NOTSPACE}: %{IPV4:IPClient}:%{NOTSPACE:PORT}
\[%{WORD:User}\]
i track daily connections as follow,
<https://lh3.googleusercontent.com/-uFFfaAHXxfw/WKFxNUuEy0I/AAAAAAAAAec/bjknMDsAJuofKAlMfYg53qeFdeucE5MswCLcB/s1600/openvpn.png>
feel free to contact me on linkedIn
<https://www.linkedin.com/in/anass-benbrahim-997552a4/> for more
Cheers,
Anas
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/99b29466-48e7-486b-ba81-5a881fe25497%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
