ingestor_syslog job from logsearch/201.0.11
Github source:
84c42949 or
master branch
Properties¶
archiver¶
enabled¶Additional queue for archive (Redis only)
- Default
false
logstash¶
metadata_level¶Whether to include additional metadata throughout the event lifecycle. NONE = disabled, DEBUG = fully enabled
- Default
NONE
logstash_ingestor¶
debug¶Debug level logging
- Default
false
filters¶Filters to execute on the ingestors
- Default
""
outputs¶A list of output plugins, with a hash of options for each of them. Please refer to example below.
- Default
- options: {} plugin: redis- Example
outputs: - options: exchange_type: direct host: 192.168.1.1 password: c1oudbunny user: logsearch plugin: rabbitmq
syslog¶
port¶Port to listen for syslog messages
- Default
5514
syslog_tls¶
port¶Port to listen for syslog-TLS messages (omit to disable)
ssl_cert¶Syslog-TLS SSL certificate (file contents, not a path) - required if logstash_ingestor.syslog_tls.port set
ssl_key¶Syslog-TLS SSL key (file contents, not a path) - required if logstash_ingestor.syslog_tls.port set
redis¶
host¶Redis host of queue
key¶Name of queue to pull messages from
- Default
logstash
port¶Redis port of queue
- Default
6379
Templates¶
Templates are rendered and placed onto corresponding
instances during the deployment process. This job's templates
will be placed into /var/vcap/jobs/ingestor_syslog/ directory
(learn more).
bin/ingestor_syslog_ctl(frombin/ingestor_syslog_ctl)bin/monit_debugger(frombin/monit_debugger)config/logstash.conf(fromconfig/logstash.conf.erb)config/syslog_tls.crt(fromconfig/syslog_tls.crt.erb)config/syslog_tls.key(fromconfig/syslog_tls.key.erb)data/properties.sh(fromdata/properties.sh.erb)helpers/ctl_setup.sh(fromhelpers/ctl_setup.sh)helpers/ctl_utils.sh(fromhelpers/ctl_utils.sh)
Packages¶
Packages are compiled and placed onto corresponding
instances during the deployment process. Packages will be
placed into /var/vcap/packages/ directory.