<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">There are two configuration files that
elastic search uses. One is for general elasticsearch
functionality (elasticsearch.yml) and the other is specific to
logging. I want to be able to control the logging of the
elasticsearch instance that is being launched by syslog-ng. Since
the syslog-ng documentation states that you can have a list of
resources seperated by ";" I thought I could use the logging.yml
file as well.<br>
<br>
<br>
<br>
On 06/07/2016 08:56 PM, Budai, László wrote:<br>
</div>
<blockquote
cite="mid:CALoymg1=ChiuxoLSm_xFXy3WQCVaGw0jFhVDSO0jMQT_--GJ9g@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
Hi,
<div><br>
</div>
<div>is that possible to set multiple resources for a node? We can
use only one resource file.</div>
<div><br>
</div>
<div>What is your use case that needs this feature? Maybe you have
splitted resource files and what we should have to do is just
merge the files into a single resource file?</div>
<div><br>
</div>
<div><br>
</div>
<div>Laszlo Budai</div>
<div>
<div><br>
On Tuesday, June 7, 2016, Evan Rempel <<a
moz-do-not-send="true" href="mailto:erempel@uvic.ca"><a class="moz-txt-link-abbreviated" href="mailto:erempel@uvic.ca">erempel@uvic.ca</a></a>>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> I have the
elasticsearch destination working correctly, but if I try
to use multiple rsources, I get an error<br>
<br>
<br>
destination d_elasticsearch_0 {<br>
elasticsearch(<br>
index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")<br>
type("flare")<br>
cluster("es-dcs-dev")<br>
client_mode("node")<br>
flush_limit("10000")<br>
template("$MESSAGE ")<br>
resource("/etc/elasticsearch/elasticsearch.yml")<br>
);<br>
};<br>
<br>
<br>
works fine, but if I add a second resource<br>
<br>
destination d_elasticsearch_0 {<br>
elasticsearch(<br>
index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")<br>
type("flare")<br>
cluster("es-dcs-dev")<br>
client_mode("node")<br>
flush_limit("10000")<br>
template("$MESSAGE ")<br>
resource("/etc/elasticsearch/elasticsearch.yml;/etc/elasticsearch/logging.yml")<br>
);<br>
};<br>
<br>
I get an error<br>
<br>
Starting system logger (syslog-ng.esgateway):
[2016-06-07T09:01:58.694633]
org.syslog_ng.elasticsearch_v2.client.ESNodeClient.loadConfigFile:69
- Can't load settings from file, file =
'/etc/elasticsearch/elasticsearch.yml
/etc/elasticsearch/logging.yml', reason = 'Failed to open
stream for url [/etc/elasticsearch/elasticsearch.yml
/etc/elasticsearch/logging.yml]';<br>
<br>
<br>
Can anyone shed some light on how to configure multiple
resources?<br>
<br>
<pre cols="500">--
Evan</pre>
</div>
</blockquote>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<p><br>
</p>
</body>
</html>