Syslog

Syslog Output

Overview

Fluentd output plugin for remote syslog with RFC5424 headers logs.

Configuration

SyslogOutputConfig

host (string, required)

Destination host address

Default: -

port (int, optional)

Destination host port

Default: “514”

transport (string, optional)

Transport Protocol

Default: “tls”

insecure (*bool, optional)

skip ssl validation

Default: false

verify_fqdn (*bool, optional)

verify_fqdn

Default: nil

enable_system_cert_store (*bool, optional)

cert_store to set ca_certificate for ssl context

Default: -

trusted_ca_path (*secret.Secret, optional)

file path to ca to trust

Default: -

client_cert_path (*secret.Secret, optional)

file path for private_key_path

Default: -

private_key_path (*secret.Secret, optional)

file path for private_key_path

Default: -

private_key_passphrase (*secret.Secret, optional)

PrivateKeyPassphrase for private key

Default: “nil”

allow_self_signed_cert (*bool, optional)

allow_self_signed_cert for mutual tls

Default: false

fqdn (string, optional)

Fqdn

Default: “nil”

version (string, optional)

TLS Version

Default: “TLSv1_2”

format (*FormatRfc5424, optional)

Format

Default: -

buffer (*Buffer, optional)

Buffer

Default: -

slow_flush_log_threshold (string, optional)

The threshold for chunk flush performance check. Parameter type is float, not time, default: 20.0 (seconds) If chunk flush takes longer time than this threshold, fluentd logs warning message and increases metric fluentd_output_status_slow_flush_count.

Default: -

Example File output configurations

apiVersion: logging.banzaicloud.io/v1beta1
kind: Output
metadata:
 name: demo-output
spec:
 syslog:
   host: SYSLOG-HOST
   port: 123
   format:
     app_name_field: example.custom_field_1
     proc_id_field: example.custom_field_2
   buffer:
     timekey: 1m
     timekey_wait: 10s
     timekey_use_utc: true

Fluentd Config Result

 <match **>
   @type syslog_rfc5424
   @id test_syslog
   host SYSLOG-HOST
   port 123
 <format>
   @type syslog_rfc5424
   app_name_field example.custom_field_1
   proc_id_field example.custom_field_2
 </format>
   <buffer tag,time>
     @type file
     path /buffers/test_file.*.buffer
     retry_forever true
     timekey 1m
     timekey_use_utc true
     timekey_wait 30s
   </buffer>
 </match>