On Sat, 2 Mar 2013, Ben Bradley wrote:
At the moment my logs are just going over the network using tcp syslog
(omfwd). Are there any other transport formats (JSON?) that are supported by
Rsyslog that can be read by logstash?
look at the lumberjack option in logstash, rsyslog supports JSON out
Hi Ben,
2013/3/2 Ben Bradley
> On 01/03/13 14:51, Radu Gheorghe wrote:
>
>> Hello Ben,
>>
>> I'm not sure another rsyslog on the Logstash side will help if the
>> bottleneck is on indexing to Elasticsearch.
>>
>> AFAIK logstash has an internal buffer of 20 or so entries, and when that's
>> full
On 01/03/13 14:51, Radu Gheorghe wrote:
Hello Ben,
I'm not sure another rsyslog on the Logstash side will help if the
bottleneck is on indexing to Elasticsearch.
AFAIK logstash has an internal buffer of 20 or so entries, and when that's
full (because the output is not fast enough) it blocks the
On Fri, 1 Mar 2013, Ben Bradley wrote:
Hi everyone
So I've got Rsyslog happily transmitting log messages over the network to Logstash. I
have disk assisted queueing on the rsyslog log "clients".
Sometimes I don't think Logstash can keep up on the other end, it blocks
because it can't get data
Hello Ben,
I'm not sure another rsyslog on the Logstash side will help if the
bottleneck is on indexing to Elasticsearch.
AFAIK logstash has an internal buffer of 20 or so entries, and when that's
full (because the output is not fast enough) it blocks the input. At this
point, you need to queue o
On Fri, 1 Mar 2013 10:20:28 +
Ben Bradley wrote:
> Hi everyone
>
> So I've got Rsyslog happily transmitting log messages over the network to
> Logstash. I have disk assisted queueing on the rsyslog log "clients".
> Sometimes I don't think Logstash can keep up on the other end, it blocks
>
Hi everyone
So I've got Rsyslog happily transmitting log messages over the network to
Logstash. I have disk assisted queueing on the rsyslog log "clients".
Sometimes I don't think Logstash can keep up on the other end, it blocks
because it can't get data into ElasticSearch fast enough. I've not
7 matches
Mail list logo