Skip to main content

Syslog UDP Source Node

Quick Reference

Host The IP address to bind the UDP listener to. ex: 0.0.0.0

Port UDP port to listen on. ex: 514

Buffer Size Maximum size in bytes of a single UDP datagram. ex: 65535

Queue Capacity Internal queue size for received messages; datagrams are dropped when the queue is full. ex: 10000

Encoding Character encoding for parsing the raw bytes of each datagram. ex: UTF-8

Overview

The Syslog UDP Source node listens on a UDP port and receives syslog-format messages, emitting each datagram as an record to be processed downstream. It is suitable for ingesting log data from network devices, servers, and applications that emit syslog over UDP.

Configuration

FieldDescriptionRequiredDefault
HostThe IP address to bind the UDP listener to. Use 0.0.0.0 to listen on all available network interfaces.No0.0.0.0
PortThe UDP port number to listen on for incoming syslog messages.No514
Buffer SizeMaximum size in bytes of a single UDP datagram that the listener will accept. Datagrams larger than this value will be truncated.No65535
Queue CapacityThe number of received messages that can be held in the internal queue. When the queue is full, incoming datagrams are dropped.No10000
EncodingCharacter encoding used to parse the raw bytes of each incoming datagram into a string.NoUTF-8
  • IMAP Source: Poll an IMAP email mailbox and emit each email as an record
  • Kafka Source: Consume streaming data from Kafka