template

Template used to render the JSON document sent to Elasticsearch.

This parameter applies to omelasticsearch: Elasticsearch Output Module.

Name:

template

Scope:

action

Type:

word

Default:

action=StdJSONFmt

Required?:

no

Introduced:

at least 8.x, possibly earlier

Description

Defines the rsyslog template that generates the JSON payload. The default StdJSONFmt includes common fields.

Action usage

action(type="omelasticsearch" template="...")

See also

See also omelasticsearch: Elasticsearch Output Module.

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.