40 lines
1.1 KiB
Plaintext
40 lines
1.1 KiB
Plaintext
#############################################################################
|
|
# Default syslog-ng.conf file which collects all local logs into a
|
|
# single file called /var/log/messages tailored to container usage.
|
|
|
|
@version: 3.38
|
|
@include "scl.conf"
|
|
|
|
source s_local { internal(); };
|
|
source s_network_tcp { syslog(transport(tcp) port(6601)); };
|
|
source s_network_udp { syslog(transport(udp) port(5514)); };
|
|
|
|
|
|
destination d_local {
|
|
file("/var/log/messages");
|
|
file("/var/log/messages-kv.log" template("$ISODATE $HOST $(format-welf --scope all-nv-pairs)\n") frac-digits(3));
|
|
};
|
|
|
|
destination d_syslog_ng_es {
|
|
elasticsearch-http(
|
|
index("syslog-ng")
|
|
type("")
|
|
user("elastic")
|
|
password("forty6and2")
|
|
url("http://pi501.in.thelinuxpro.net:9200/_bulk")
|
|
template("$(format-json --scope rfc5424 --scope dot-nv-pairs
|
|
--rekey .* --shift 1 --scope nv-pairs
|
|
--exclude DATE @timestamp=${ISODATE})")
|
|
persist-name("d_syslog_ng_es")
|
|
);
|
|
};
|
|
|
|
log {
|
|
source(s_local);
|
|
source(s_network_tcp);
|
|
source(s_network_udp);
|
|
destination(d_syslog_ng_es);
|
|
};
|
|
|
|
@include "/config/syslog-ng.conf.d/*.conf"
|