Syslog Connector

Syslog Connector

Receive syslog messages (RFC 3164/5424) to detect which hosts are actively sending system logs.

Category	System Logs
Modes	realtime
Image	ghcr.io/silentpulse/connector-syslog:1.0.0
Manifest	hub.silentpulse.io/universe/packages/syslog/manifest.json

Requirements

• Network devices or servers configured to send syslog to SilentPulse
• UDP/TCP port accessible from syslog sources

Configuration

Connection Fields

Field	Type	Required	Default	Description
listen_addr	text	yes	0.0.0.0:514	Address and port to listen on
protocol	text	no	udp	Transport protocol (udp or tcp)
use_tls	boolean	no		Enable TLS (tcp only)

Query Fields

Field	Type	Required	Default	Description
hostname_field	text	yes	hostname	Syslog field containing the asset hostname
facility_filter	text	no		Comma-separated syslog facilities to include

Protocols

Supports UDP (default), TCP, and TCP+TLS. Use TLS for secure syslog transport (RFC 5425).

Scaling

Resource	Request
CPU	100m
Memory	128Mi
Min replicas	1
Max replicas	2

Limitations

• Realtime mode only
• UDP messages may be lost under heavy load