<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">So i have install
syslog-ng and elasticsearch ... can you give me some syslog-ng
configuration to send this log to elasitcsearch ?<br>
<br>
For now i have the following:<br>
<br>
source s_sys {<br>
system();<br>
internal();<br>
network(ip(0.0.0.0) port(6514)<br>
flags(syslog-protocol)<br>
transport("tls")<br>
tls(key_file("/etc/syslog-ng/cert.d/serverkey.pem")<br>
cert_file("/etc/syslog-ng/cert.d/servercert.pem")<br>
ca_dir("/etc/syslog-ng/ca.d")<br>
) );<br>
<br>
};<br>
<br>
everything else is default .... <br>
<br>
Ivan<br>
</font><br>
<div class="moz-cite-prefix">On 05/26/2016 01:34 PM, Fabien Wernli
wrote:<br>
</div>
<blockquote cite="mid:20160526113430.GI3381@ccfawe.in2p3.fr"
type="cite">
<pre wrap="">On Thu, May 26, 2016 at 12:51:45PM +0200, Ivan Adji - Krstev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">From what i have understand for now, ES is some kind of PatternDB ? or
some kind of NoSQL ? And the scenario will be:
Syslog-NG will send the logs to PatternDB and will stored into ES, and
Kibana is the one that will represent ?
</pre>
</blockquote>
<pre wrap="">