syslog-ng Store Box 7.3.0 - Administration Guide

To import hostlists from a text file

1. Create a plain text file containing the hostlist policies and IP addresses to import. Every line of the file will add an IP address or network to a policy. Use the following format:

   name_of_the_policy;match

   or

   ignore;IP address

   For example, a policy that ignores the 192.168.5.5 IP address and another one that matches on the 10.70.0.0/24 subnet, use:

   policy1;ignore;192.168.5.5
   policy2;match;10.70.0.0/24

   To add multiple addresses or subnets to the same policy, list every address or subnet in a separate line, for example:

   policy1;ignore;192.168.7.5
   policy1;ignore;192.168.5.5
   policy1;match;10.70.0.0/24

2. Navigate to Policies > Hostlists > Import from file > Browse and select the text file containing the hostlist policies to import.

   Figure 125: Policies > Hostlists — Importing hostlists

   

3. Depending on your needs, append the imported addresses to your existing list, or replace the list of addresses with the imported ones.

   • If you are updating existing policies and want to add new addresses to them, select Append.

   • If you are replacing the existing addresses with the ones in the text file, select Replace.

4. Click Upload, then .

   NOTE: If you modify a hostlist, you must only restart syslog-ng if a host, which is already connected, must be ignored with a hostlist. Navigate to Basic Settings > System > Service control > Syslog traffic, indexing & search: and select Restart syslog-ng for the changes to take effect.