Receive over TCP/UDP
You can create a data collector to configure a TCP/UDP socket.
Related topics
To configure a TCP/UDP socket as a data collector
- Navigate to Administration > Data Collectors > Add Data Collector
.
- In the Name box, provide a unique name to identify this data collector.
- From the Type list, select Receive over TCP/UDP (Syslog etc).
Provide the following information, as appropriate:
Field
Description
Target/Collection Host
Collection Host (Agent)
Failed to execute the [excerpt-include] macro.
Note: For this type of data collector, the target host and collection host are expected to have different values.
Collector Inputs
Protocol
Select UDP or TCP as appropriate.
Bind address
Provide the IP address to which you want to bind for creating a connection.
Port
Provide the port to connect to the UDP/TCP protocol.
Data Pattern
Pattern
Select the appropriate data pattern to use for indexing the selected data file.
For this type of data collector, the product does not support filtering of relevant data patterns. Also, because this data collector receives events asynchronously, you cannot select a data pattern and then preview the way it will appear on the Search tab. Therefore, BMC recommends that you select Free Text in this field, provide other necessary details, and save the data collector. After the data is indexed and starts showing on the Search tab, copy a few lines of the data entries and use them to customize an existing data pattern (by cloning it), or add a new data pattern.
Date Format
Manually scan through the list available and select a date format.
If you do not find a relevant date format, you can also create a new date format by selecting the Create new Date Format option.
Notes:
- If you select both – a pattern and a date format, then the date format specified takes precedence over the date format from the pattern that you selected. So the timestamp is indexed as per the specified date format, and the rest of the data is indexed as per the pattern.
- If you select only a date format, then the date format is used for indexing the timestamp, while the rest of the data is displayed in a raw format in your search results.
Start/Stop Collection
(Optional) Select this check box if you want to start the data collection immediately.
The [expand] macro is a standalone macro and it cannot be used inline.
- Click Create to save your changes.