howto Archives - rsyslog

Using rsyslog to Reindex/Migrate Elasticsearch data

By rgheorghePosted on May 10, 2016May 30, 2018Posted in More complex scenariosTagged config, elasticsearch, external inputs, Guides for rsyslog, howto, imtcp, omelasticsearch, reindex, rsyslog, syslog

Original post: Scalable and Flexible Elasticsearch Reindexing via rsyslog by @Sematext This recipe is useful in a two scenarios: migrating data from one Elasticsearch cluster to another (e.g. when you’re upgrading from Elasticsearch 1.x to 2.x or later) reindexing data from one index to another in a cluster pre 2.3. For clusters on version 2.3 […]

Recipe: Apache Logs + rsyslog (parsing) + Elasticsearch

By rgheorghePosted on October 13, 2015May 30, 2018Posted in More complex scenariosTagged apache, elasticsearch, Guides for rsyslog, howto, imfile, imklog, imuxsock, liblognorm, mmnormalize, omelasticsearch, parsing, queues, recipe, rsyslog, syslog, templates, unstructured, v8

Original post: Recipe: Apache Logs + rsyslog (parsing) + Elasticsearch by @Sematext This recipe is about tailing Apache HTTPD logs with rsyslog, parsing them into structured JSON documents, and forwarding them to Elasticsearch (or a log analytics SaaS, like Logsene, which exposes the Elasticsearch API). Having them indexed in a structured way will allow you […]

Coupling with Logstash via Redis

By rgheorghePosted on October 5, 2015May 30, 2018Posted in More complex scenariosTagged elasticsearch, Guides for rsyslog, howto, imfile, json, logstash, omelasticsearch, omhiredis, queues, recipe, redis, rsyslog, syslog, templates, v8, worker thread

Original post: Recipe: rsyslog + Redis + Logstash by @Sematext OK, so you want to hook up rsyslog with Logstash. If you don’t remember why you want that, let me give you a few hints: Logstash can do lots of things, it’s easy to set up but tends to be too heavy to put on […]