iac
/
syslog-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

create a default catch-all config

This commit is contained in:
Kameron Kenny 2024-06-19 10:59:29 -04:00
parent 74e85a7009
commit b4ea70c534
No known key found for this signature in database
GPG Key ID: E5006629839D2276
4 changed files with 22 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile
View File

@ -1,7 +1,7 @@
FROM debian:latest
MAINTAINER Kameron Kenny <kkenny379@gmail.com>
LABEL version="20240619.1.2"
LABEL version="20240619.1.3"
LABEL description="Debian Based syslog-ng"
RUN apt-get update

21
config/syslog-ng.conf
View File

@ -15,25 +15,4 @@ destination d_local {
file("/var/log/messages-kv.log" template("$ISODATE $HOST $(format-welf --scope all-nv-pairs)\n") frac-digits(3));
};
destination d_syslog_ng_es {
elasticsearch-http(
index("syslog-ng")
type("")
user("elastic")
password("forty6and2")
url("http://pi501.in.thelinuxpro.net:9200/_bulk")
template("$(format-json --scope rfc5424 --scope dot-nv-pairs
--rekey .* --shift 1 --scope nv-pairs
--exclude DATE @timestamp=${ISODATE})")
persist-name("d_syslog_ng_es")
);
};
log {
source(s_local);
source(s_network_tcp);
source(s_network_udp);
destination(d_syslog_ng_es);
};
@include "/config/syslog-ng.conf.d/*.conf"

20
config/syslog-ng.conf.d/zzz-catch-all.conf Normal file
View File

@ -0,0 +1,20 @@
destination d_syslog_ng_es {
elasticsearch-http(
index("syslog-ng")
type("")
user("elastic")
password("forty6and2")
url("http://pi501.in.thelinuxpro.net:9200/_bulk")
template("$(format-json --scope rfc5424 --scope dot-nv-pairs
--rekey .* --shift 1 --scope nv-pairs
--exclude DATE @timestamp=${ISODATE})")
persist-name("d_syslog_ng_es")
);
};
log {
source(s_local);
source(s_network_tcp);
source(s_network_udp);
destination(d_syslog_ng_es);
};

2
docker-compose.yml
View File

@ -10,7 +10,7 @@ services:
syslog-ng:
build:
dockerfile: Dockerfile
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:240619.1.2
image: docker-registry1.in.thelinuxpro.net:5000/tlp/syslog-ng:240619.1.3
container_name: syslog-ng
#environment:
#- TZ:America/Indianapolis