Mike de Rhino  created NIFI-856:
-----------------------------------

             Summary: Add suport to Lumberjack protocol
                 Key: NIFI-856
                 URL: https://issues.apache.org/jira/browse/NIFI-856
             Project: Apache NiFi
          Issue Type: New Feature
            Reporter: Mike de Rhino 


It would be great if NIFI could support the lumberjack protocol so to enable 
the use of logstash forwarder as a source of data.

A lot of non Java shops tend to avoid installing Java at data producing nodes 
and instead of Flume they end up using things like kafka, heka, fluentd or 
logstash-forwarded as data shipping mechanisms. 

Kafka is great but its architecture seem to be better focused on multi-DC 
environments instead of multi-branch scenarios (imagine having to manager 80 
Zookeeper quorum, one for each country where you operate?)

[Heka|https://github.com/mozilla-services/heka] is fine, it has decent 
backpressure buffering but no concept of acknowledgement on the receiving side 
of a TCP stream. If the other end of a TCP stream is capable of listening but 
gets stuck with its messages it will keep spitting data through the pipe, 
oblivious to the woes at the other end.

Logstash forwarded in the other hand, is a quite simple tool, with a reasonable 
implementation of acknowledgments on the receiving side but... it depends on 
Logstash(and logstash has its own issues).

It would be great if NIFI could serve as a middle man, receiving [lumberjack 
messages|https://github.com/elastic/logstash-forwarder/blob/master/PROTOCOL.md] 
and offloading some of the hard work Logstash seems to struggle with (e.g. 
using NIFI to save to HDFS while a downstream Logstash writes into ES).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to