#############################################################################
# Default syslog-ng.conf file which collects all local logs into a
# single file called /var/log/messages tailored to container usage.

@version: 3.38
@include "scl.conf"

source s_local { internal(); };
source s_network_tcp { syslog(transport(tcp) port(6601)); };
source s_network_udp { syslog(transport(udp) port(5514)); };


destination d_local {
  file("/var/log/messages");
  file("/var/log/messages-kv.log" template("$ISODATE $HOST $(format-welf --scope all-nv-pairs)\n") frac-digits(3));
};

destination d_syslog_ng_es {
  elasticsearch-http(
    index("syslog-ng")
    type("")
    user("elastic")
    password("forty6and2")
    url("http://pi501.in.thelinuxpro.net:9200/_bulk")
    template("$(format-json --scope rfc5424 --scope dot-nv-pairs
    --rekey .* --shift 1 --scope nv-pairs
    --exclude DATE @timestamp=${ISODATE})")
    persist-name("d_syslog_ng_es")
  );
};

log {
  source(s_local);
  source(s_network_tcp);
  source(s_network_udp);
  destination(d_syslog_ng_es);
};

@include "/config/syslog-ng.conf.d/*.conf"