gravwell/simple_relay repository overview

Simple Relay already ships with the core Gravwell⁠ container , but if you want to run another instance this image contains a stand alone Simple Relay ingster.

Simple Relay is designed to receive log data from remote systems over TCP, UDP, or TLS. Simple relay is the ingester of choice for receiving data from things like syslog, corelight, network switches, or any sensor that knows how to throw logs over a network connection.

Additional information on how to configure Simple Relay can be found on in the ingester documentation⁠ page.

Refer to Gravwell's Docker guide⁠ for information on how to deploy ingester containers.

Note: Because this is a Linux application, we strongly recommend running under Docker on a Linux host. Performance may suffer on other operating systems. MacOS users cannot access containers directly by IP, because the containers are actually run within a Linux VM. You can either use netcat from within a Docker container (either the same container or a new one), or forward the appropriate ingester ports to the host when launching the Gravwell container