Syslog
Syslog Output
Overview
Fluentd output plugin for remote syslog with RFC5424 headers logs.
Configuration
SyslogOutputConfig
host (string, required)
Destination host address
Default: -
port (int, optional)
Destination host port
Default: “514”
transport (string, optional)
Transport Protocol
Default: “tls”
insecure (*bool, optional)
skip ssl validation
Default: false
verify_fqdn (*bool, optional)
verify_fqdn
Default: nil
enable_system_cert_store (*bool, optional)
cert_store to set ca_certificate for ssl context
Default: -
trusted_ca_path (*secret.Secret, optional)
file path to ca to trust
Default: -
client_cert_path (*secret.Secret, optional)
file path for private_key_path
Default: -
private_key_path (*secret.Secret, optional)
file path for private_key_path
Default: -
private_key_passphrase (*secret.Secret, optional)
PrivateKeyPassphrase for private key
Default: “nil”
allow_self_signed_cert (*bool, optional)
allow_self_signed_cert for mutual tls
Default: false
fqdn (string, optional)
Fqdn
Default: “nil”
version (string, optional)
TLS Version
Default: “TLSv1_2”
format (*FormatRfc5424, optional)
Default: -
buffer (*Buffer, optional)
Default: -
slow_flush_log_threshold (string, optional)
The threshold for chunk flush performance check. Parameter type is float, not time, default: 20.0 (seconds) If chunk flush takes longer time than this threshold, fluentd logs warning message and increases metric fluentd_output_status_slow_flush_count.
Default: -
Example File
output configurations
apiVersion: logging.banzaicloud.io/v1beta1
kind: Output
metadata:
name: demo-output
spec:
syslog:
host: SYSLOG-HOST
port: 123
format:
app_name_field: example.custom_field_1
proc_id_field: example.custom_field_2
buffer:
timekey: 1m
timekey_wait: 10s
timekey_use_utc: true
Fluentd Config Result
<match **>
@type syslog_rfc5424
@id test_syslog
host SYSLOG-HOST
port 123
<format>
@type syslog_rfc5424
app_name_field example.custom_field_1
proc_id_field example.custom_field_2
</format>
<buffer tag,time>
@type file
path /buffers/test_file.*.buffer
retry_forever true
timekey 1m
timekey_use_utc true
timekey_wait 30s
</buffer>
</match>